Administration of the Avaya G350 Media Gateway - Avaya Support

Managing login permissionsTo disable RADIUS authentication on the G350, use the set radius authenticationdisable command.To display the RADIUS parameters, use the show radius authentication command.Shared secrets are not displayed.For additional information on RADIUS configuration and authentication, go to the Avaya website at http://www.avaya.com/support, and perform a search for the document Avaya G700/G350 RADIUS Configuration Overview.802.1x protocolThe 802.1x protocol is a method for performing authentication to obtain access to the G350’sLAN ports. 802.1x provides a means of authenticating and authorizing users attached to a LANport and of preventing access to that port in cases where the authentication process fails. Youcan enable 802.1x on the MM314 media module’s 10/100 Ethernet ports.Note:Note: You cannot enable 802.1x on the MM314 media module’s Gigabit Ethernet port(port 51).The 802.1x protocol defines an interaction between the following three entities:● Supplicant — an entity (the host) at one end of a point-to-point LAN segment that isrequesting authentication●●Authenticator — an entity (in this case the G350) at the other end of a point-to-point LANsegment that facilitates authentication of the SupplicantAuthentication (RADIUS) Server — an entity that provides an authentication service to theAuthenticator. The Authentication Server determines, from the credentials provided by theSupplicant, whether the Supplicant is authorized to access the services provided by theAuthenticator.How port based authentication worksThe authentication procedure is port-based, which means:●●●access control is achieved by enforcing authentication on connected portsif an endpoint station that connects to a port is not authorized, the port state is set to“unauthorized”, which closes the port to all trafficas a result of an authentication attempt, the port can be either in a “blocked” or a“forwarding” stateIssue 3 January 2005 41