Best Practice Detail
13-12-8012
Network Operators, Service Providers and Public Safety should in order to prevent unauthorized users from accessing Operations, Administration, Management, and Provisioning (OAM&P) systems, use strong authentication for all users. To protect against tampering, spoofing, eavesdropping, and session hijacking, Service Providers and Network Operators should use a trusted path for all important OAM&P communications between network elements, management systems, and OAM&P staff. Examples of trusted paths that might adequately protect the OAM&P communications include separate private-line networks, VPNs or encrypted tunnels. Any sensitive OAM&P traffic that is mixed with customer traffic should be encrypted. OAM&P communication via TFTP and Telnet is acceptable if the communication path is secured by the carrier. OAM&P traffic to customer premises equipment should also be via a trusted path.
Status: Rollover New
References/Comments: \"http://www.atis.org/ - ATIS-0300276.2008 Operations, Administration, Maintenance, and Provisioning Security Requirements for the Public Telecommunications Network: A Baseline of Security Requirements for the Management Plane: March 2008 ITU - CCITT Rec. X.700 (X.720) Series ITU - CCITT Rec. X.800 Series ITU-T Rec. X.805 ITU-T Rec. X.812\".
Historical events:
- Network Operators
- Service Providers
- Public Safety
- Internet/Data
- Cyber Security
- Network Operations
- Public Safety Service
- Encryption
- CSRIC VII: Rollover New In CSRIC VII