Ssh Protocol Support; Rsa Authentication Process - Avaya G450 Manual

Table 3: ASG authentication CLI command (continued)
Command
login authentication
services-logins
ppp authentication
show auth-file info
show download auth-file
status
show login authentication
show upload auth-file
status

SSH protocol support

Secure Shell (SSH) protocol is a security protocol that enables you to establish a remote
session over a secured tunnel, also called a remote shell. SSH accomplishes this by creating a
transparent, encrypted channel between the local and remote devices. In addition to the remote
shell, SSH provides secure file transfer between the local and remote devices. SSH is used for
telnet file transfers. The G450 supports two concurrent SSH users.
Establishing an SSH session can be done by RSA authentication, or password authentication.
To determine which of these ways is used on your G450, enter show ip ssh.

RSA authentication process

The G450 generates a key of variable length (512-2048 bits) using the DSA encryption
●
method. This is the private key.
The G450 calculates an MD5 hash of the private key, called the public key (also called a
●
fingerprint). The public key is always 16 bytes long. This public key is displayed.
The G450 sends the public key to the client computer. This public key is used by the client
●
to encrypt the data it sends to the G450. The G450 decrypts the data using the private key.
Description
Activate all Avaya Services logins, including local login
to Console port and Services port with "craft" login. Use
the no form to deactivate all Avaya Services logins.
Set modem operation mode. Setting the mode to ras
enables ASG authentication for Avaya Services remote
logins through dial-up modem connection.
Display ASG authentication file information
Display download status of ASG authentication file,
after using copy ftp|scp|tftp|usb auth-file to
download an authentication file to the gateway
Display login authentication settings and information
Display upload status of ASG authentication file, after
using copy auth-file ftp|scp|tftp to upload an
authentication file from the gateway
Managing login permissions
2 of 2
Issue 1 January 2008 61