Administration of the Avaya G350 Media Gateway - Avaya Support

Accessing the Avaya G350 Media GatewayManaging login permissionsThis section explains how to manage login permissions and contains the following topics:●●●●●●Security overview — overview of the G350’s internal security mechanism and how it canoperate in conjunction with a RADIUS authentication systemManaging users and passwords — explanation of the users, passwords, and accessprivileges, and instructions on how to define new usersSSH protocol support — explanation of SSH authentication and instructions on how toconfigure SSH authentication parametersSCP protocol support — explanation of SCP authentication and instructions on how toconfigure SCP authentication parametersRADIUS authentication — instructions on how to configure the G350 to work with anexternal RADIUS server802.1x protocol — instructions on how to configure 802.1x protocolSecurity overviewThe Avaya G350 Media Gateway includes a security mechanism through which the systemadministrator defines users and assigns each user and username and a password. Each user isassigned a privilege level. The user’s privilege level determines which commands the user canperform.In addition to its basic security mechanism, the G350 supports secure data transfer via SSHand SCP.The G350 can be configured to work with an external RADIUS server to provide userauthentication. When RADIUS authentication is enabled on the G350, the RADIUS serveroperates in conjunction with the G350 security mechanism. When the user enters a username,the G350 first searches its own database for the username. If the G350 does not find theusername in its own database, it establishes a connection with the RADIUS server, and theRADIUS server provides the necessary authentication services.The G350 also uses the 802.1x protocol in conjunction with EAP within EAPOL and overRADIUS to provide a means of authenticating and authorizing users attached to a LAN port,and of preventing access to that port in cases where the authentication process fails.36 Administration of the Avaya G350 Media Gateway