S 2.107 Documentation of the configuration of ISDN cards

Initiation responsibility: IT Security Officer, Head of IT

Implementation responsibility: Administrator

Depending on the area of application, the possibilities for configuring an ISDN card are almost endless. To ensure proper re-starting (e.g. following a replacement of the ISDN card or the related communications software), it is advisable to document at least the following settings:

• type designation and serial number of the card in use,
• call number(s) for establishing communications links and performing any authentication required,
• D-channel protocol in use (1TR6, EDSS-1 etc.),
• B-channel protocol in use (X.25, PPP, TCP/IP, bit transparent etc.),
• current CAPI version in use,
• version of driver software in use,
• type of data compression, if used, and
• type of authentication (e.g. PAP/CHAP), if used.

When using authentication procedures which involve a mutual maintenance of secrecy (e.g. through the use of a password), this secret can also be documented. However, this documentation must only be made available to a limited group of persons, to avoid unwanted disclosure of the secret.

Review questions:

• Are the configuration settings made for the ISDN cards documented in a comprehensible manner?