Administration of the Avaya G350 Media Gateway - Avaya Support

Accessing the Avaya G350 Media GatewayWhen you create a new user, you must define the user’s password and privilege level. Thefollowing example creates a user named John with the password johnny and a Read-writeprivilege level:G350-001> username john password johnny access-type read-writeSSH protocol supportSSH (Secure Shell) protocol is a security protocol that enables you to establish a remotesession over a secured tunnel, also called a remote shell. SSH accomplishes this by creating atransparent, encrypted channel between the local and remote devices. In addition to the remoteshell, SSH provides secure file transfer between the local and remote devices. SSH is used fortelnet file transfers. The G350 supports two concurrent SSH users.There are two ways to establish an SSH session:● RSA authentication● Password authenticationUse the ssh enable command to determine which of these ways is used on the G350. SeeSSH Configuration on page 39.RSA authentication works as follows:● The G350 generates a key of variable length (512-2048 bits) using the DSA encryptionmethod. This is the private key.●●●●●The G350 calculates an MD5 Hash of the private key, called a fingerprint (the public key).The fingerprint is always 16 bytes long. This fingerprint is displayed.The G350 sends the public key (the fingerprint) to the client computer. This public key isused by the client to encrypt the data it sends to the G350. The G350 decrypts the datausing the private key.Both sides negotiate and must agree on the same chipper type. The G350 only supports3DES-CBC encryption. The user on the client side accepts the fingerprint. The clientmaintains a cache containing a list of fingerprints per server IP address. If the informationin this cache changes, the client notifies the user.The client chooses a random number that is used to encrypt and decrypt the informationsent.This random number is sent to the G350, after encryption based on the G350’s public key.● When the G350 receives the encrypted random number, it decrypts it using the privatekey. This random number is now used with the 3DES-CBC encryption method for allencryption and decryption of data. The public and private keys are no longer used.Password authentication works as follows:●Before any data is transferred, the G350 requires the client to supply a user name andpassword. This authenticates the user on the client side to the G350.38 Administration of the Avaya G350 Media Gateway