+- Yealink Forums (http://forum.yealink.com/forum)
+-- Forum: IP Phone Series (/forumdisplay.php?fid=4)
+--- Forum: General topics (/forumdisplay.php?fid=15)
+--- Thread: How to disable http features (/showthread.php?tid=857)
How to disable http features - paulreta - 09-28-2013 06:36 AM
Hi, my name is Pablo,
There is a security problem related to this feature in my company. We are changing old internal phones for SIP lines, we have about 400 of them and we have to install many many more.
But the posibility of these phones of making a remote call via http using the default passwords "admin" or "user" is not of our liking. We cannot change each phone password by hand, is a time consuming task and the company is not located in the same building, there are 37 of them.
Another idea is to set the http port 80 by default to another one, again, we cannot change this by hand on each phone.
Is there a way to solve this problem? A kind of http script to send on each phone ip address and change the port or the default password?
Even more, is there a way to disable http features remotely?
Kindly waiting for your answer
Best regards
Pablo
RE: How to disable http features - Yealink Support - 09-28-2013 03:09 PM
Hi Pablo,
1. What's the phone and firmware are you using?
2. You can change the password for all phones at one time with our auto provision feature:
-------------------
#!version:1.0.0.1
security.user_name.admin =
security.user_name.user =
-------------------
About auto provision user guide, please refer below instruction:
http://www.yealink.com/Upload/T2X/T2X-V71/Yealink_SIP-T2%20Series_T3_Series_VP530_IP%20Phones_Auto_Provisioning_Guide_V71_140.pdf
3. When you upgrade to our latest V71 firmware, http feature is disabled, so other's can't remote control your phone.
http://www.yealink.com/SupportDownloadfiles_detail.aspx?CateId=184&flag=142
Thanks.
RE: How to disable http features - paulreta - 09-29-2013 05:06 AM
Hi,
Most of our phones are using 9.61.0.85, new ones came with a firmware upgrade but we have to downgrade them because on booting they not automatically get an ip address, you have to press ok manually on the phone to obtain one. With firmware 9.61.0.85 if the phone boots via http or power failure it takes an ip address automatically without the need to press ok to select dhcp.
We detect this too problems, "http features" and "booting" very recently so, we test only our t20p models, we haven’t test out t28p and t38p models yet.
Is the auto provision feature available in version 9.61.0.85?
Thanks for the quick reply
Best regards
Pablo
RE: How to disable http features - Yealink Support - 09-29-2013 11:01 AM
Hi Pablo,
For version 9.61.0.85, the auto provision parameter is different:
-----------------------------------
[ AdminPassword ]
path = /config/Setting/autop.cfg
password =
[ UserPassword ]
path = /config/Setting/autop.cfg
password =
-----------------------------------
Attached y000000000007.cfg is for T20 phone.