Version 6.6
309
October 2014
Installation & Operation Manual
33. Configuring Security Settings
See 'Configuring Connectivity between the Media Gateway and Additional SNMP
Managers' on page
for detailed description on how to configure connectivity
with additional SNMP managers.
See 'Configuring IPSEC/IKE for Management Interfaces (on SC boards)' on page
for a detailed description on how to configure the IPSEC
management mode.
33.4
Secure Access to the CLI Interface
Secure access to the CLI management interface is achieved via the use of the Secure
Shell (SSH) protocol. Associated file transfer protocols – Secure Copy (SCP) and
Secure FTP (SFTP) – are used for transferring files to/from the Mediant 8000.
33.4.1
SSH Protocol
The Secure Shell (SSH) is a standard protocol that allows the establishment of a
secure channel between a local and remote computer. It provides authentication,
confidentiality and integrity of data exchanged between the two computers.
The Mediant 8000 uses SSH v2 to encrypt CLI management sessions. SSH
connection is available even when Secure Operation mode is disabled and is a
preferred connection type for the CLI management interface.
33.4.2
SCP and SFTP Protocols
Secure Copy (SCP) and Secure FTP (SFTP) are associated protocols that support
files transfer over SSH connections. They are used to transfer backup files and debug
data to/from the SC boards on the Mediant 8000 Media Gateway. For better
performance and shorter file transfer times, use the SCP protocol instead of SFTP.
33.5
Disabled Remote Root Login
The Mediant 8000 does not allow use of
root
username when logging into the CLI
interface via the IP network. This measurement reduces the chances of a successful
brute force attack on
root
super-user account and is considered to be a common
practice.
Users who require
root
permissions on the Mediant 8000's CLI interface, are still able
to login as
root
user. However the login procedure is more complicated than for
regular CLI users and leaves appropriate traces in system security log. see 'Logging in
as a Root User' on page
The Disabled Remote Root Login feature was not available in v3.2 or earlier of the
Mediant 8000 software and for these versions is not enabled by default during the
Online Software Upgrade. If you upgraded the Mediant 8000 from the version where
the remote root login was not disabled, disable it manually as described below as
soon as possible.
Содержание Mediant 8000
Страница 1: ...Media Gateway Mediant 8000 Installation Operation Maintenance Manual Version 6 6 Document LTRT 92224...
Страница 2: ......
Страница 28: ...Installation Operation Manual 28 Document LTRT 92224 Mediant 8000 This page is left blank intentionally...
Страница 32: ...Installation Operation Manual 32 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 33: ...Part I Hardware Overview This part describes the hardware overview of the Mediant 8000 chassis...
Страница 34: ......
Страница 36: ...Installation Operation Manual 36 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 38: ...Installation Operation Manual 38 Document LTRT 92224 Mediant 8000 Figure 3 2 Mediant 8000 Back View...
Страница 44: ...Installation Operation Manual 44 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 46: ...Installation Operation Manual 46 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 52: ...Installation Operation Manual 52 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 56: ...Installation Operation Manual 56 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 62: ...Installation Operation Manual 62 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 88: ...Installation Operation Manual 88 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 90: ......
Страница 108: ...Installation Operation Manual 108 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 126: ...Installation Operation Manual 126 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 156: ...Installation Operation Manual 156 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 158: ......
Страница 176: ...Installation Operation Manual 176 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 264: ......
Страница 276: ...Installation Operation Manual 276 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 292: ...Installation Operation Manual 292 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 302: ...Installation Operation Manual 302 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 400: ...Installation Operation Manual 400 Document LTRT 92224 Mediant 8000 This page is left intentionally blank...
Страница 416: ...Installation Operation Manual 416 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 458: ...Installation Operation Manual 458 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 526: ...Installation Operation Manual 526 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 544: ...Installation Operation Manual 544 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 546: ......
Страница 724: ...Installation Operation Manual 724 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 775: ...Part VI Maintenance This part describes the Mediant 8000 maintenance procedures...
Страница 776: ......
Страница 790: ...Installation Operation Manual 790 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 810: ...Installation Operation Manual 810 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 832: ...Installation Operation Manual 832 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 834: ......
Страница 844: ...Installation Operation Manual 844 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 856: ...Installation Operation Manual 856 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 870: ...Installation Operation Manual 870 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 876: ...Installation Operation Manual 876 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 878: ...Installation Operation Manual 878 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 879: ...Part VIII Appendices This part describes additional Mediant 8000 configuration procedures...
Страница 880: ......
Страница 890: ...Installation Operation Manual 890 Document LTRT 92224 Mediant 8000 Figure B 1 HSRP VRRP Configuration...
Страница 904: ...Installation Operation Manual 904 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 910: ...Installation Operation Manual 910 Document LTRT 92224 Mediant 8000 This page is intentionally left blank...
Страница 924: ...Media Gateway Mediant 8000 www audiocodes com Installation Operation Maintenance Manual...