Administration of the Avaya G350 Media Gateway - Avaya Support

Accessing the Avaya G350 Media GatewayTo perform file transfers secured by SCP, the G350 launches a local SSH client via the CLI. Thisestablishes a secured channel to the secured file server. The G350 authenticates itself to theserver by providing a user name and password. With a Windows-based SSH server(WinSSHD), the user name provided must be a defined user on the Windows machine withread/write privileges. The files transferred via SCP are saved in the C:\Documents and Settings\username directory.The network element performs file transfer in unattended mode.RADIUS authenticationIf your network has a RADIUS server, you can configure the G350 to use RADIUSauthentication. A RADIUS server provides centralized authentication service for many deviceson a network. When you use RADIUS authentication, you do not need to configure usernamesand passwords on the G350. When you try to access the G350, the G350 searches for yourusername and password in its own database first. If it does not find them, it activates RADIUSauthentication.To use RADIUS authentication:1. Configure your RADIUS server with the usernames, passwords, and privilege levels thatyou want to use on the G350.2. Configure RADIUS authentication on the G350, as described below.Use the following commands to configure RADIUS authentication on the G350. For moreinformation about these commands, see the Avaya G350 Media Gateway CLI Reference,555-245-202.1. Use the set radius authentication enable command to enable RADIUSauthentication.2. Use the set radius authentication secret command to set the shared secret forthe authentication. This command must be followed by a text string. For example:set radius authentication secret hush3. Use the set radius authentication server command to set the IP address of theprimary or secondary RADIUS Authentication server.You can use the following commands to change the RADIUS parameters. These commands areoptional.●●Use the set radius authentication retry-number command to set the numberof times to resend an access request when there is no response.Use the set radius authentication retry-time command to set the time to waitbefore resending an access request.● Use the set radius authentication udp-port command to set the RFC 2138approved UDP port number. Normally, the UDP port number should be set to its defaultvalue of 1812. Some early implementations of the RADIUS server used port number 1645.40 Administration of the Avaya G350 Media Gateway