System Security; Unauthorized Access; Unistim Security With Dtls; Ip Security - Avaya 1000 Installation And Commissioning Manual

Planning and management

System security

CS1000E and CS1000M (Large System) system security is explained in detail in Avaya Security
Management Fundamentals, NN43001-604. This is required reading for any Branch Office
administrator. Refer to Avaya System Management Reference, NN43001-600 for additional
information.
Avaya recommends that the Station Control Password (SCPW) be longer than four characters. This
recommendation is not enforced by the software. The SCPW does not have to be the same in the
main office and the Branch Office, but the user can set them to be the same for convenience.

Unauthorized access

When using Branch User Config during the installation phase, a branch password and a main office
password are required. The branch password is the IP Phone Installer's Password or the Temporary
IP Phone Installer's Password. If the required password is not configured, an error message (or
otherwise failure to login) results. Three failed attempts lock that particular user ID from logging in
for one hour. The lock is recorded in the TPS system log, and is printed to the Teletype Terminal
(TTY). The system administrator can clear the lockout. Also, rebooting or reregistering the telephone
to the TPS node can also clear the lock.
Three failed attempts to enter the main office password also locks the user out (this time at the main
office Call Server). The main office Call Server lock can be removed only by an administrator using
a LD 32 command to disable and re-enable that Terminal Number (TN) at the main office.
For additional information, see Avaya Communication Server 1000E: Planning and Engineering
(NN43041-220).

UNIStim security with DTLS

The LTPS uses the UNIStim security with DTLS feature to detect if a phone uses Secure UNIStim.
After the you install the Communication Server 1000 software on the system (either during a fresh
install or upgrade), DTLS signaling security is disabled by default (DTLS policy is set to OFF). You
must configure at least Basic Security Level to enable DTLS. For more information on UNIStim
security with DTLS, see Avaya Security Management Fundamentals, NN43001-604.

IP Security

IP security (IPsec) for Communication Server 1000 networks is centrally managed from the IPsec
for Intra System Signaling Security (ISSS) management interface of the Primary UCM server. ISSS
Branch Office Installation and Commissioning
80
Signaling Server CLI commands
Comments? infodev@avaya.com
on page 200.
June 2014