Ssh Parameters - AudioCodes Mediant 500 E-SBC User Manual

User's Manual
Parameter
Web/EMS: TLS Remote Subject
Name
CLI: tls-rmt-subs-name
[TLSRemoteSubjectName]
Web: TLS Expiry Check Start
CLI: expiry-check-start
[TLSExpiryCheckStart]
Web: TLS Expiry Check Period
CLI: expiry-check-period
[TLSExpiryCheckPeriod]
Web: TLS FIPS 140 Mode
[TLS_Fips140_Mode]

53.4.5 SSH Parameters

Secure Shell (SSH) parameters are described in the table below.
Parameter
Web/EMS: Enable SSH Server
CLI: ssh
[SSHServerEnable]
Web/EMS: Server Port
cli: ssh-port
[SSHServerPort]
Web/EMS: SSH Admin Key
CLI: ssh-admin-key
[SSHAdminKey]
Web: Require Public Key
EMS: EMS: SSH Require Public
Key
CLI: ssh-require-public-key
[SSHRequirePublicKey]
Web: Max Payload Size
Version 6.8
Defines the Subject Name that is compared with the name
defined in the remote side certificate when establishing TLS
connections.
If the SubjectAltName of the received certificate is not equal to
any of the defined Proxies Host names/IP addresses and is not
marked as 'critical', the Common Name (CN) of the Subject field
is compared with this value. If not equal, the TLS connection is
not established. If the CN uses a domain name, the certificate
can also use wildcards ('*') to replace parts of the domain
name.
The valid range is a string of up to 49 characters.
Note: This parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
Defines the number of days before the installed TLS server
certificate is to expire at which the device must send a trap
(acCertificateExpiryNotifiaction) to notify of this.
The valid value is 0 to 3650. The default is 60.
Defines the periodical interval (in days) for checking the TLS
server certificate expiry date.
The valid value is 1 to 3650. The default is 7.
Enables FIPS 140-2 conformance mode for TLS.

[0] Disable (default)

[1] Enable
Table 53-27: SSH Parameters
Enables the device's embedded SSH server.

[0] Disable (default)

[1] Enable
Defines the port number for the embedded SSH server.
Range is any valid port number. The default port is 22.
Defines the RSA public key for strong authentication for logging in
to the SSH interface (if enabled).
The value should be a base64-encoded string. The value can be
a maximum length of 511 characters.
Enables RSA public keys for SSH.

[0] = (Default) RSA public keys are optional if a value is
configured for the parameter SSHAdminKey.

[1] = RSA public keys are mandatory.
Note: To define the key size, use the TLSPkeySize parameter.
Defines the maximum uncompressed payload size (in bytes) for
711
53. Configuration Parameters Reference
Description
Description
Mediant 500 E-SBC