Avaya Media Gateway G250, Руководство администратора, Страница: 730 / 840

FIPS
730 Administration for the Avaya G250 and Avaya G350 Media Gateways
29. Change the password of the default Crypto-officer and of all existing CLI users to comply
with the requirement for a minimum secret length of 8 characters.
- Use the
username
command.
30. Use the
username
command to define new additional operators for Crypto-officer, User,
and Read-Only User roles, as required.
31. Enter
show username
to verify successful definition of CLI users.
32. Remove unnecessary OSPF peers.
a. Use the
show ip ospf interface
to list all interfaces with OSPF activated.
b. If there are interfaces with OSPF activated, use the
no ip ospf
message-digest-key
command to delete the OSPF MD5 key in the context of the
interface.
33. Configure primary and secondary RADIUS servers.
G350-001(super)# Username root password root_fips access-type admin
User account modified.
G350-001(super)#
G350-001(super)# username admin password admin_password access-type admin
User account added
G350-001(super)# username readwrite password rw_password access-type
read-write
User account added
G350-001(super)# username readonly password ro_password access-type
read-only
User account added
G350-001(super)# show username
User Access Account Active Authent.
account level type method
-------------------------------- ----------- ---------- ------ ----------
root admin local yes password
admin admin local yes password
readwrite read-write local yes password
readonly read-only local yes password
G350-001(super)# Set radius authentication enable
Done!
G350-001(super)# set radius authentication server 200.200.200.20 primary
Done!
G350-001(super)# set radius authentication secret fips_test1
Done!