Avaya G250 and G250-BRI Branch Office Media Gateways w/FIPS Non-Proprietary Security Policy
Version 1.2 Wednesday, 14 December, 2005
© 2005 Avaya Inc.
May be reproduced only in its original entirety [without revision]. Page 11 of 23
CID 106595
#
Interface
Qty
Logical interface definition
Comments
6.
BRI Ports
2
BRI Phone Trunks.
Data input/output
2 BRI Trunks (4 ISDN-B Channels) supporting
ISDN based CO access.
7.
Console
1
Control inputs, Status output
Supports cryptographic module administration.
8.
USB
1
Control inputs, Status output,
Power output
Supports cryptographic module administration for
modem dial in connection. Disabled in FIPS
Approved mode.
9.
Media Module
Connectors
2
Data input, data output, status
output, control input
Provide the ability to communicate using,
Serial/TDM Data, Ethernet, PCI, CPU Device
Bus, facilitates Power.
10. AC Power
Input
1
Power Input
Provides power to the module from an external
source.
11. Ground
Connector
1
Ground
Provides power to the module from an external
source.
12. Reset Button
1
Control Input
Resets the device
13. ASB Button
1
Control Input
When pressed with the reset button, cause the
device to boot from an alternate firmware image
bank
14. System LEDs
4
Status Output
Indicates Power, Modem connection through
Console interface, CPU activity, and Alarm state.
15. LEDs on ETH
WAN
2
Status Output
Link state and activity indication on the
associated data interface
16. LEDs on ETH
LAN
2
Status Output
Link state and activity indication on the
associated data interface
Table 4 – G250-BRI Ports and Interfaces
4. Identification and Authentication Policy
4.1.
Assumption of roles
The definition of all supported roles is shown
Table 5
below.
Role
Type of
Authentication
Authentication Data
Description
Cryptographic
-Officer
(Admin User)
Identity-based
operator
authentication.
Username and Password. The module
stores user identity information in an
internal or an external Radius Server
database.
The owner of the cryptographic
module with full access to the
services of the module.
User
(Read/Write
Identity-based
operator
Username and Password. The module
stores user identity information in an
internal or an external Radius Server
An assistant to the Admin User that
has read/write access to a subset of