Lucent Technologies DEFINITY PC Console Release 2.5 Users Manual

							About This DocumentIssue 2.5   October 1999   xi   Maintenance ports are their most recent target of abuse.  In this scenario,
hackers find a private branch exchange (PBX) maintenance port number with
their “war dialer;” a device that randomly dials telephone numbers until a modem
or dial tone is obtained.  They then “hack” the user ID and password, sometimes
just by using the PBX default passwords, to enter your system.
  This is the most dangerous type of abuse because, once in your system, the
hackers have control over all the administrative commands.  While in your
system, they have been known to:
n Turn on Remote Access or Direct Inward System Access (DISA).  Hackers
have been known to change the system at 8:00 p.m. to allow fraudulent calls.
Then, at 3:00 a.m., they reprogram the system back to its original
configuration.  One company was hit three weekends in a row before it
realized what was happening.
n Turn off Call Detail Recording (CDR) or Station Message Detail Recording
(SMDR), hack your system all weekend, then turn it back on before Monday
morning.  This is especially disturbing to managers who are security
conscious and check the CDR/SMDR reports every morning looking for
suspicious activity.  They will not see records of the calls because
CDR/SMDR was turned off by the hackers.  The administrator may notice the
absence of CDR/SMDR records for evening, night, and weekend calls made
by employees.
  PBX Security Measures  Everyone in your company who uses the telephone system is responsible for
system security.  Users and attendants need to be aware of how to recognize
and react to potential hacker activity.  Informed people are more likely to
cooperate with security measures that often make the system less flexible and
more difficult to use.
  Implement the following general security measures to protect your PBX and
discourage the unauthorized use of your communications system.
n Never program passwords or authorization codes onto auto-dial buttons.
Display phones reveal the programmed numbers, and internal abusers can
use the auto-dial buttons to originate unauthorized calls.
n Discourage the practice of writing down passwords.  If a password needs to
be written down, keep it in a secure place and never discard it while it is
active.
n Attendants should tell their system manager if they answer a series of calls
where there is silence on the other end or the caller hangs up.
n Users who are assigned voice mailboxes should frequently change personal
passwords and should not choose obvious passwords. 
						

							About This Documentxii   Issue 2.5   October 1999n Advise users with special telephone privileges (such as Remote Access,
voice mail outcalling, and call forwarding off-switch) of the potential risks and
responsibilities.
n Be suspicious of any caller who claims to be with the telephone company and
wants to check an outside line.  Ask for a callback number, hang up, and
confirm the caller’s identity.
n Never distribute the office telephone directory to anyone outside the
company; be careful when discarding it.
n Never accept collect phone calls.
n Never discuss your telephone system’s numbering plan with anyone outside
the company.
n Change passwords frequently (at least quarterly).  Set password expiration
times and tell users when the changes go into effect.  Changing passwords
routinely on a specific date (such as the first of the month) helps users to
remember to do so.
n Establish well-controlled procedures for resetting passwords.
n Limit the number of invalid attempts to access voice mail to five or less.
n Monitor access to the dial-up maintenance port.  Change the access
password regularly and issue it only to authorized personnel.  Consider using
the Remote Port Security Device (RPSD) — a Lucent Technologies product
that helps protect your administration and maintenance ports from
unauthorized access.
n Create a PBX system management policy concerning employee turnover and
include these actions:
¾ Delete all unused voice mailboxes in the voice mail system.
¾ If an employee is terminated, immediately delete any voice mailboxes
belonging to that employee.
¾ If a terminated employee had Remote Access calling privileges and a
personal authorization code, remove the authorization code
immediately.
¾ If barrier codes and/or authorization codes were shared by the
terminated employee, these should be changed immediately.  Notify
the remaining users as well.
¾ If the terminated employee had access to the system administration
interface, their login ID should be removed (G3V3 or later).  Any
associated passwords should be changed immediately.
n Back up system files regularly to ensure a timely recovery should it be
required.  Schedule regular, off-site backups.
n Keep the attendant console(s) and supporting documentation in an office that
is secured with a changeable combination lock.  Provide the combination
only to those individuals having a real need to enter the office. 
						

							About This DocumentIssue 2.5   October 1999   xiii n Keep telephone wiring closets and equipment rooms locked.
n Keep telephone logs and printed reports in locations that only authorized
personnel can enter.
n Design distributed reports so they do not reveal password or trunk access
code information.
  For additional information about securing against toll fraud, refer to the following
document:
 
  Document #  Document Title  555-025-600  BCS Products Security Handbook  Lucent Technologies Fraud
Intervention  If you suspect you are being victimized by toll fraud and you need technical
support or assistance, call Technical Service Center Toll Fraud Intervention
Hotline at 1 800 643-2353.
  Related Documentation  The document you are reading now assumes that you are already familiar with
your computer, with MS-DOS®
, and with Microsoft®
 Windows®
.  If this is not the
case, refer to the following documentation to learn this necessary information,
then continue with your PC Console training:
n User’s guide for your personal computer.  You may need this reference for
explanations of commands used by your PC when you install, configure, and
use your PC Console software package.
n User’s guide for Microsoft MS-DOS.  You may need this reference for
explanations of the DOS commands used by your PC during the operation of
your PC Console software package.
n User’s guide for Microsoft Windows.  You may need this reference for
explanations of the commands and configuration options that are used or
affected by the PC Console software package. 
						

							About This Documentxiv   Issue 2.5   October 1999   Product Support  PC Console was designed for compatibility with all current versions of
DEFINITYÒ
 Communications System G1 and G3, and DEFINITY Prologixä
Solutions.
  If you have a question about PC Console, first read this manual or refer to the
on-line help.  If you cannot find the answer, contact the Technical Service
Center (TSC) at 1 800 242-2121.
  If you are an international customer, call your distributor, your Regional Center
of Excellence, or contact the International Technical Assistance Center (ITAC) at
US code 303 804-3777. 
						

							   Installation
 1  
  Issue 2.5   October 1999   1-1   Before You Begin  Before you begin to install PC Console, verify that your PC Console
installation package is complete, and that your PC meets both the hardware
and software requirements identified in this section.
  Contents of the Package  Your PC Console package should contain the following:
n PC Console software
One CD-ROM that contains the PC Console installation and application
software, on-line help and PC Console documentation.
n Registration card for notification of updates
If you want to be notified of updates to the PC Console system, return
this registration card (by mail or fax) to the BCS Publications Center.
The appropriate address is provided on the card.
n Comment card
Lucent Technologies welcomes your feedback on the PC Console
documentation.  Please return the comment card (by mail or fax) to the
address provided on the card.
Hardware and Software Requirements for the
Personal ComputerThis chapter provides instructions for installing the PC Console software on a
personal computer.  That computer must meet, or exceed, the following basic
requirements:
n IBM-compatible 
						

							  Installation
   1-2   Issue 2.5   October 1999n 15” Super VGA (SVGA) monitor
n Pentium®
-based processor
n 100 Megahertz clocking speed
n 16 MB of RAM available to PC Console
n CD-ROM drive
n Microsoft Windows NT™
, Microsoft Windows 95, or Microsoft Windows
3.1 or later
n A COM Port dedicated to PC Console.  (No other application may vie
for this port.)
n Sufficient hard disk space.  You will need 4 MB of hard disk space for
the PC Console software, plus additional space for your PC Console
directory information.  The space for your PC Console directory
information depends upon the number of users you are supporting and
the amount of information stored for each person.  Refer to the
following chart to roughly assess the additional space required.
 
  Number of Users è
 
  Number of Characters
per User’s Record ê  200  500  1,000  5,000  10,000  20,000  200  4 MB  4.1 MB  4.2 MB  4.5 MB  5 MB  6 MB  500  4.1 MB  4.3 MB  4.5 MB  6.5 MB  9 MB  14 MB  1,000  4.2 MB  4.5 MB  5 MB  9 MB  14 MB  24 MB  5,000  4.5 MB  6.5 MB  9 MB  29 MB  54 MB  104 MB  10,000  5 MB  9 MB  14 MB  54 MB  104 MB  204 MB  20,000  6 MB  14 MB  54 MB  104 MB  204 MB  404 MB 
  Additional Hardware Required  In addition to a personal computer that meets or exceeds the requirements
listed above, you will need the following hardware components to install and
use your PC Console.
n Telephone; a 2- or 4-wire DCP telephone
  a CallMaster®
 VI telephone, and associated 2-wire DCP cord
  or
  an 8411 telephone, and associated D8W telephone cord
  or 
						

							  Installation
  
  Issue 2.5   October 1999   1-3   a 64xx-, 74xx-, 84xx-, or 94xx-series DCP telephone, and associated
D8W telephone cord; plus the DEFINITY PassageWay®
DirectConnect Adapter, with D8W telephone cord.
 
   NOTE:
  You may want to augment your telephone configuration
with a headset and necessary adapter to facilitate ease-
of-use.
n PC Connector cord:
  Verify that the EIA-232-D Connector cord provided with PC Console
is appropriate for connecting your PC to either the PassageWay
Adapter (if one is used) or to the telephone.
  One end of the cord connects to the COM port on your PC.  The
COM port typically has either a 9-pin male, or a 25-pin male
interface.
  The other end of the cord connects either to the PassageWay
Adapter (which has a 9-pin female interface), or to the telephone
(which has a 25-pin female interface).
  The EIA-232-D Connector cord must connect to each of the two
devices in your environment.  If necessary, you can purchase
adapters to change one or both ends of the cord to a different
number of pins, or to a different gender.
n Power supply:
  For US installations, the DEFINITY Power Kit, containing:
KS-22911 power supply, 400B2 adapter, and D6AP cord.
  For US or International installations, the MSP-1 Power Supply
Kit, containing:  MSP-1 power supply, and power cord.
 
   NOTE:
  The CallMaster VI is powered by the switch, and does not
require a separate power supply. 
						

							  Installation
   1-4   Issue 2.5   October 1999   Installation  Installing PC Console is a multi-step process.  You must perform each of the
following, in the order indicated:
n Administer PC Console, at the switch, as an Attendant Console.
n Assess your hardware components.
n Connect the PC to the telephone.
n Connect the PC/telephone configuration to the power source.
 
   NOTE:
  This step is not necessary if you are using a CallMaster VI telephone.
The CallMaster VI is powered by the switch, and does not require a
separate power supply.
n Install the PC Console software.
n Administer the PC Console software.
n If appropriate, administer the PhoneLine MasterDirectory software.
n Confirm that your telephone is operating as an Attendant Console.
Each of these steps is outlined, in order, in this chapter.  To begin, proceed to
the next section, “Administering PC Console, at the Switch, as an Attendant
Console.”
Administering PC Console, at the Switch, as
an Attendant ConsoleThe first step in the installation process is administering the console, at the
switch.  It is essential that the switch recognize PC Console as a 302
Attendant Console
To administer PC Console, at the Switch, as a 302 Attendant Console:
1. Enter the following command:
display console parameters2. Verify that the switch console parameters are correct.  These
should include (but are not limited to) Class of Service, Class of
Restriction, timing, and queue priorities.
3. If PC Console is replacing an existing 302 Attendant Console, print
a copy of the associated attendant form using the following
command:
display attendant # print 
						

							  Installation
  
  Issue 2.5   October 1999   1-5 4. If PC Console is not replacing an existing 302 Attendant Console,
use the following command to enter the data for PC Console as a
302 Attendant Console:
add attendant #
5. Select the appropriate options on the attendant form.  Among these
options is the type of console being defined.  We recommend that
you specify a 302B to achieve the greatest compatibility with
PC Console.
6. Make a note of the feature button assignments, particularly those
that have been moved from their default positions (indicated in the
“Default Button Number” column, below).
Default Button
NumberButton Assignment1Split6Hold
19Forced Release
23Night Service
24Position Busy7. Make a note of the display button assignments, particularly those
that have been moved from their default positions (indicated in the
“Default Button Number” column, below).  While these display
buttons are not required, they are strongly recommended if you
wish to achieve the greatest functionality in PC Console.
Default Button
NumberButton Assignment1Normal4Next
6Call-Disp8. Assign an extension to this station, if desired.
9. Print the attendant form using the following command.  (You will
need the information it contains when administering PC Console.)
display attendant # print 
						

							  Installation
   1-6   Issue 2.5   October 1999 Assessing Your Hardware ComponentsPC Console can be configured to use either a 64xx-, 74xx-, 84xx- or 94xx-
series DCP telephone with PassageWay Adapter, or an 8411 or CallMaster VI
telephone.  You will note that the 8411 and the CallMaster VI telephones do
not require the PassageWay Adapter.  The functionality of these telephones
eliminates the need for this additional component.Figure 1-1.  The Available Telephone Components