Avaya G250 Administration page 501

Table 37: Critical security parameters (continued)
Key
IPSEC SA phase-2 AES key
IPSEC SA phase-2, HMAC
keys
IPSEC SA phase-2 keys per
protocol
IKE ephemeral phase-2
DH private key phase-2
IKE ephemeral phase-2
DH shared secret phase-2
IPSEC SA phase-2 keys per
protocol
User password
Root password
Radius Secret
OSPF Secret
PPPoE CHAP/PAP Secret
SNMPv3 user authentication
password
Fixed Serial Number secret
Ephemeral Serial Number
secret
X9.31 PRNG key
Description/Usage
phase-2, basic quick mode
phase-2, basic quick mode
phase-2, basic quick mode
phase-2 Diffie Hellman private keys used in PFS for key
renewal
phase-2 PFS Diffie Hellman shared secret used in PFS for
key renewal
phase-2, basic quick mode
Used for password authentication of CLI users
Used for authentication of default CLI user during first setup
Used for hashing password with MD5. One secret common
to both Primary and Secondary Radius server.
Used for authentication OSPF messages with the Peer
OSPF routers. Secret exchanged hashed using MD5. One
secret defined per peer router identity.
Used for authentication to PPPoE server
SNMPv3 operator MD5 authentication password used for
authenticating to User and Read-Only User roles
The TDES key used for the first exchange of the serial
number exchange protocol between Gateway and S8300/
Blade server entity
The TDES key used for the first exchange of the serial
number exchange protocol.
This key is periodically re-negotiated between S8300/Blade
server entity and the Gateway.
Key for X9.31 PRNG
Overview
2 of 2
Issue 1.1 June 2005 501