Administration of the Avaya G350 Media Gateway - Avaya Support

FIPSTable 14: Roles and required identification and authentication 2 of 2RoleType ofauthenticationAuthentication dataDescriptionPPPoE ClientRole-based operatorauthenticationChap/Pap Secrets.Simple passwordauthentication is usedfor PAP-basedauthentication.Gateway uses MD5function to hash thechallenge and thesecret value in theresponse message toPPPoE Server.An entity that facilitatesconnection to thebroadband accessnetwork using PPP overEthernet protocol(PPPoE)IKE PeerRole-based operatorauthenticationIKE pre-shared keysAn entity that facilitatesIPSec VPNsSerial NumberPeerRole-based verificationTDES encryptedchallengeGateway exchanges itsserial number with aServer to enable featureactivation2 of 2Assumptions concerning user behavior●SECURITY ALERT: The●●●Password length:- User password: at least eight characters- Other passwords: at least six characters- PSK (Pre-shared keys) for IKE: at least 13 characters! SECURITY ALERT:user should refer to Password guidelines on page 306.Lock-out after authentication fail after fixed number of log-in attempts (default value isthree)Device management via direct link to Console port or via IPSec tunnels onlyCommands are documented in the Avaya G350 Media Gateway CLI Reference,555-245-202.296 Administration of the Avaya G350 Media Gateway