Administration of the Avaya G350 Media Gateway - Avaya Support

OverviewTable 14: Roles and required identification and authentication 1 of 2RoleType ofauthenticationAuthentication dataDescriptionCryptographic-Officer(Admin User)Identity-based operatorauthenticationUsername andPassword. The modulestores user identityinformation internallythrough the use of anexternal Radius Serverdatabase.The owner of thecryptographic modulewho has full access to themodule’s servicesUser(Read/Write User)Identity-based operatorauthenticationUsername andPassword. The modulestores user identityinformation internallythrough the use of anexternal Radius Serverdatabase.An assistant to the AdminUser who has read/writeaccess to a subset ofconfiguration and statusindicationsRead-only UserIdentity-based operatorauthenticationUsername andPassword. The modulestores user identityinformation internallythrough the use of anexternal Radius Serverdatabase.An assistant to the AdminUser who has read-onlyaccess to a subset ofmodule configuration andstatus indicationsRADIUS ServerRole-based operatorauthenticationShared Radius secret.Gateway authenticatesRadius serverresponse by examiningthe MD5 hash of theshared secret, therequest Authenticator,and other responsevalues in a responsemessage.An entity authenticates tothe module for thepurpose of permitting/denying access toservicesOSPF Router PeerRole-based operatorauthenticationRouter peer Secret.Authentication ofOSPF protocolexecuted by examiningthe authentication fieldin OSPF packetcarrying MD5 hash ofthe packet and thesecret.An entity authenticates tothe module for thepurpose of permitting/denying access toservices1 of 2Issue 3 January 2005 295