Enabling Cli; Enabling Telnet For Cli; Enabling Ssh With Rsa Public Key For Cli - AudioCodes Mediant 800B User Manual

7.2

Enabling CLI

By default, access to the device's CLI through Telnet and SSH is disabled. This section
describes how to enable these protocols.
7.2.1

Enabling Telnet for CLI

The following procedure describes how to enable Telnet. You can enable a secured Telnet
that uses Secure Socket Layer (SSL) where information is not transmitted in the clear. If
SSL is used, a special Telnet client is required on your PC to connect to the Telnet
interface over a secured connection; examples include C-Kermit for UNIX and Kermit-95
for Windows.
For security, some organizations require the display of a proprietary notice upon starting a
Telnet session. You can use the configuration ini file parameter, WelcomeMessage to
configure such a message (see ''Creating a Login Welcome Message'' on page 62).

To enable Telnet:
1. Open the Telnet/SSH Settings page (Configuration tab > System menu >
Management > Telnet/SSH Settings).
2. From the 'Embedded Telnet Server' drop-down list, select Enable Unsecured or
Enable Secured (i.e, SSL).
3. In the 'Telnet Server TCP Port' field, enter the port number for the embedded Telnet
server.
4.
5. Click Submit, and then reset the device with a burn-to-flash for your settings to take
effect.
For a detailed description of the Telnet parameters, see ''Telnet Parameters'' on page 912.
7.2.2

Enabling SSH with RSA Public Key for CLI

Unless configured for TLS, Telnet is not secure as it requires passwords to be transmitted
in clear text. To overcome this, Secure SHell (SSH) is used, which is the de-facto standard
for secure CLI. SSH 2.0 is a protocol built above TCP, providing methods for key
exchange, authentication, encryption, and authorization.
SSH requires appropriate client software for the management PC. Most Linux distributions
have OpenSSH pre-installed; Windows-based PCs require an SSH client software such as
PuTTY,
http://www.chiark.greenend.org.uk/~sgtatham/putty/.
By default, SSH uses the same username and password as the Telnet and Web server.
SSH supports 1024/2048-bit RSA public keys, providing carrier-grade security. Follow the
instructions below to configure the device with an administrator RSA key as a means of
strong authentication.
User's Manual
which can
84
Mediant 800B Gateway and E- SBC
be downloaded
Document #: LTRT-10296
from