Avaya J169 Installing And Administering page 70

Administering your phone
You also have the following options to restrict or remove how the deskphone displays crucial
network information or uses the information.
• Support signaling channel encryption.
Note:
Signaling and audio are not encrypted when unnamed registration is effective.
• Restrict the response of the phone to SNMP queries to only IP addresses on a list you
specify.
• Specify an SNMP community string for all SNMP messages the phone sends.
• Apply the security-related parameters, SNMP community string (SNMPSTRING), SNMP
Source IP addresses (SNMPADD), and Craft Access Code (PROCPSWD) that is
administered on the call server. Download the file with encrypted signaling in addition to
unencrypted HTTP or encrypted HTTPS.
Note:
The phone supports the SNMPv2c protocol, which is not secure.
• Restrict dial pad access to Local Administration Procedures, such as specifying IP
addresses, with a password.
• Restrict dial pad access to Craft Local Procedures to experienced installers and technicians.
• Restrict the ability of the user to use a phone Options application to view network data.
• Download and use third-party trusted certificates.
Registration and Authentication
Avaya call servers support using the extension and password to register and authenticate IP
deskphones. For more information, see the current version of your call server administration
manual.
Secure Shell Support
The phone supports the Secure Shell (SSH) v2 protocol. The SSH protocol is a tool that the Avaya
services organization can use to remotely connect to IP deskphones to monitor, diagnose, or
debug deskphone performance. Because of the sensitive nature of remote access, you can
disable permission with the SSH_ALLOWED parameter.
The deskphone displays a security warning message at start of the session. You can specify your
own file using SSH_BANNER_FILE, or the deskphone will use the following default file:
This system is restricted solely to authorized users for legitimate
business purposes only. The actual or attempted unauthorized access,
use, or modification of this system is strictly prohibited.
Unauthorized users are subject to company disciplinary procedures and
or criminal and civil penalties under state, federal, or other
applicable domestic and foreign laws. The use of this system may be
monitored and recorded for administrative and security reasons. Anyone
accessing this system expressly consents to such monitoring and
recording, and is advised that if it reveals possible evidence of
May 2018 Installing and Administering Avaya J169/J179 IP Phone H.323
Comments on this document? infodev@avaya.com
70