Identification And Authentication Policy; Assumption Of Roles - Avaya G250 User Manual

Avaya G250 and G250-BRI Branch Office Media Gateways w/FIPS Non-Proprietary Security Policy
Version 1.2
# Interface Qty
6. BRI Ports 2
7. Console 1
8. USB 1
9. Media Module 2
Connectors
10. AC Power 1
Input
11. Ground 1
Connector
12. Reset Button 1
13. ASB Button 1
14. System LEDs 4
15. LEDs on ETH 2
WAN
16. LEDs on ETH 2
LAN
4.

Identification and Authentication Policy

4.1. Assumption of roles

The definition of all supported roles is shown
Type of
Role
Authentication
Cryptographic Identity-based
-Officer operator
(Admin User) authentication.
User Identity-based
(Read/Write operator
© 2005 Avaya Inc. May be reproduced only in its original entirety [without revision].
Logical interface definition
BRI Phone Trunks.
Data input/output
Control inputs, Status output
Control inputs, Status output,
Power output
Data input, data output, status
output, control input
Power Input
Ground
Control Input
Control Input
Status Output
Status Output
Status Output
Table 4 – G250-BRI Ports and Interfaces
Table 5
Authentication Data
Username and Password. The module
stores user identity information in an
internal or an external Radius Server
database.
Username and Password. The module
stores user identity information in an
internal or an external Radius Server
Wednesday, 14 December, 2005
Comments
2 BRI Trunks (4 ISDN-B Channels) supporting
ISDN based CO access.
Supports cryptographic module administration.
Supports cryptographic module administration for
modem dial in connection. Disabled in FIPS
Approved mode.
Provide the ability to communicate using,
Serial/TDM Data, Ethernet, PCI, CPU Device
Bus, facilitates Power.
Provides power to the module from an external
source.
Provides power to the module from an external
source.
Resets the device
When pressed with the reset button, cause the
device to boot from an alternate firmware image
bank
Indicates Power, Modem connection through
Console interface, CPU activity, and Alarm state.
Link state and activity indication on the
associated data interface
Link state and activity indication on the
associated data interface
below.
Description
The owner of the cryptographic
module with full access to the
services of the module.
An assistant to the Admin User that
has read/write access to a subset of
Page 11 of 23
CID 106595