Hello all:
I'm exploring a "what-if" scenario (again) dealing with CDR account codes. My only question is this: Do you actually ASSIGN the account codes, or can the user enter ANY digits, as long is it's the correct length?
In my switch I can't turn on CDR Account Codes (have yet to figure out my INIT pw) but after going through the docs, I see where you turn it on, where you specify the length, but not where to administer them. From all my reading it looks like if you set the length to 3, then a user can dial ANY 3 digits and it will allow the call.
Exceprt from docs:
Quote:
| An entry of an account number (1 to 15 digits) can be required for the originating station COR/COS, toll calls, or WCR network calls. If an account number is not entered when required, the call is denied. Although the account number is not verified, callers must enter the appropriate number of digits set by the system administrator. This adds another level of digit entry that a hacker must crack to gain access to an outside line. |
So although the account number is not verified, you just have to have the correct number of digits. Right?
Arch