Contents

1   Description

This instruction describes how to change the administrative state of ECLI, NETCONF, or FTP over TLS.

2   Procedure

2.1   Change Administrative State of ECLI over TLS

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has the System Security Administrator role.
  • At least one of the administrative states, ECLI over TLS or NETCONF over TLS, must be unlocked.
  • An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.

Before locking the administrative state of ECLI over TLS, make sure that the administrative state of NETCONF over TLS is UNLOCKED. Having both interfaces set to LOCKED disables O&M access to the ME. Refer to product-specific troubleshooting instructions to resolve such a scenario.

Steps

1. Navigate to the CliTls Managed Object (MO), for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,CliTls=1

2. Enter Config mode:

   (CliTls=1)>configure

3. Set the administrativeState attribute, for example:

   (config-CliTls=1)>administrativeState=UNLOCKED

   Note:  

   To lock the administrative state, set the attribute value to LOCKED.

   
   
4. Commit the settings:

   (config-CliTls=1)>commit

5. Verify the settings:

   (CliTls=1)>show

   The following is an example output:

   CliTls=1 [...] administrativeState=UNLOCKED

2.2   Change Administrative State of NETCONF over TLS

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has the System Security Administrator role.
  • At least one of the administrative states, ECLI over TLS or NETCONF over TLS, must be unlocked.
  • An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.

Attention!

Risk of system malfunction or traffic disturbance.

Before locking the administrative state of ECLI over TLS, make sure that the administrative state of NETCONF over TLS is UNLOCKED. Having both interfaces set to LOCKED disables O&M access to the ME. Refer to product-specific troubleshooting instructions to resolve such a scenario.

Steps

1. Navigate to the NetconfTls Managed Object (MO), for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,NetconfTls=1

2. Enter Config mode:

   (NetconfTls=1)>configure

3. Set the administrativeState attribute, for example:

   (config-NetconfTls=1)>administrativeState=UNLOCKED

   Note:  

   To lock the administrative state, set the attribute value to LOCKED.

   
   
4. Commit the settings:

   (config-NetconfTls=1)>commit

5. Verify the settings:

   (NetconfTls=1)>show

   The following is an example output:

   NetconfTls=1 [...] administrativeState=UNLOCKED

2.3   Change Administrative State of FTP over TLS

Prerequisites

• No documents are required.
• No tools are required.
• The following conditions must apply:
  • The user has the System Security Administrator role.
  • An Ericsson Command-Line Interface (ECLI) in exec mode is in progress.

Attention!

Risk of system malfunction or traffic disturbance.

Before locking the administrative state of FTP over TLS, make sure that the FTP-server is not used. The change of state closes all ongoing FTP connections.

Steps

1. Navigate to the FtpTlsServer Managed Object (MO), for example:

   >dn ManagedElement=1,SystemFunctions=1,SysM=1,FileTPM=1,FtpServer=1,FtpTlsServer=1

2. Enter Config mode:

   (FtpTlsServer=1)>configure

3. Set the administrativeState attribute, for example:

   (config-FtpTlsServer=1)>administrativeState=UNLOCKED

   Note:  

   To lock the administrative state, set the attribute value to LOCKED.

   
   
4. Commit the settings:

   (config-FtpTlsServer=1)>commit

5. Verify the settings:

   (FtpTlsServer=1)>show

   The following is an example output:

   FtpTlsServer=1 [...] administrativeState=UNLOCKED