Contents

1   Introduction

This document describes how to configure the Administrative State of ECLI or NETCONF over TLS.

1.1   Prerequisites

This section describes the prerequisites, which must be fulfilled before using the procedure.

1.1.1   Conditions

The following conditions must apply:

• The user has the System Security Administrator role.
• If locking ECLI over TLS, NETCONF over TLS must be unlocked, or the other way around.
• An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.

2   Procedure

2.1   Configure Administrative State of ECLI over TLS

Attention!

Risk of system malfunction or traffic disturbance.

Before locking the administrative state of ECLI over TLS, make sure that the administrative state of NETCONF over TLS is UNLOCKED. Having both interfaces set to LOCKED disables O&M access to the ME. Refer to product-specific troubleshooting instructions to resolve such a scenario.

To configure the Administrative State of ECLI over TLS:

1. Navigate to the CliTls Managed Object (MO), for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,CliTls=1

2. Enter Config mode:

   (CliTls=1)>configure

3. Set the administrativeState attribute, for example:

   (config-CliTls=1)>administrativeState="UNLOCKED"

   Note:  

   To lock the administrative state, set the attribute value to "LOCKED".

   
   
4. Commit the settings:

   (config-CliTls=1)>commit

5. Verify the settings:

   (CliTls=1)>show

   The following is an example output:

   CliTls=1 [...] administrativeState="UNLOCKED"

2.2   Configure Administrative State of NETCONF over TLS

Attention!

Risk of system malfunction or traffic disturbance.

Before locking the administrative state of ECLI over TLS, make sure that the administrative state of NETCONF over TLS is UNLOCKED. Having both interfaces set to LOCKED disables O&M access to the ME. Refer to product-specific troubleshooting instructions to resolve such a scenario.

To configure the Administrative State of NETCONF over TLS:

1. Navigate to the NetconfTls Managed Object (MO), for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,NetconfTls=1

2. Enter Config mode:

   (NetconfTls=1)>configure

3. Set the administrativeState attribute, for example:

   (config-NetconfTls=1)>administrativeState="UNLOCKED"

   Note:  

   To lock the administrative state, set the attribute value to "LOCKED".

   
   
4. Commit the settings:

   (config-NetconfTls=1)>commit

5. Verify the settings:

   (NetconfTls=1)>show

   The following is an example output:

   NetconfTls=1 [...] administrativeState="UNLOCKED"