Inalp Networks SmartWare Release 2.10, Руководство по настройке программного обеспечения

Страница: 295 / 357

Gateway Configuration 295
calculation is a mathematical one-way function (virtually impossible to derive the password from the
hash value). To enable H.235 security on H.323 perform the steps described below.
Procedure
To enable H.235 Security on H.323 gateway
Mode
Gateway H.323
Command Purpose
Step 1 node (gw-h323)[h323]#h235security master-
password master-password
Sets the master password (32 hex digits,
0-9, A-F) with which the H.235 password
is decrypted.
Note: configure the master password
only over secure links (e.g. in LAN
environments only or with serial
connection), which cannot be
wiretapped.
Step 2 C:\getcryptopassword h235-password master-
password
Generates H.235 password by means of
the master password with the encryption
tool.
Step 3
node (gw-h323)[h323]#h235security
encrypted-password h235-password
or
node (gw-h323)[h323]#h235security clear-
password h235-password
Sets the password used for crypto token
calculation. The password is entered
encrypted. The password to be entered is
the output of the tool
'getcryptopassword.exe'.
Configures the password used for crypto
hashed token calculation. The password
is entered in clear text (min. 1, max. 12
alphanumeric characters).
N.B.: Do not use this command over
insecure links (subject to wiretapping). If
you enter the password as clear text, you
don’t need to configure a master-
password.
Step 4 node (gw-h323)[h323]#h235security time-
window time-window
Sets the time window used for
timestamp comparison by H.235. If a
received H.323 message with H.235
crypto token has a timestamp outside the
time window (relative to the local time)
the message is refused.
Step 5 node (gw-h323)[h323]#h235security version
{v1 | v2}
General there exist two H.235 versions.
Use 'v1' if 'v2' does not work. In 'v1'
"sender-id" and "general-id" must not be
specified.
Step 6 node (gw-h323)[h323]#h235security sender-id
sender-id
Sets the ID of the Node. Must be a string
containing 2, 4, 6, ... characters.
Software Configuration Guide Release 2.10, Revision 1.00