Patton electronics SmartNode Series Software Configuration Manual page 460

38 • H.323 gateway configuration
Mode: Gateway H.323
Step
node (gw-h323)[h323]#h235security master-
1
password master-password
C:\getcryptopassword h235-password mas-
2
ter-password
3 node (gw-h323)[h323]#h235security pass-
word h235-password encrypted
or
node (gw-h323)[h323]#h235security pass-
word h235-password
node (gw-h323)[h323]#h235security time-
4
window time-window
node (gw-h323)[h323]#h235security ver-
5
sion {v1 | v2}
6 node (gw-h323)[h323]#h235security sender-
id sender-id
node (gw-h323)[h323]#h235security gen-
7
eral-id general-id
node (gw-h323)[h323]#h235-security ras-
8
auth-int-rx
or
node (gw-h323)[h323]#no h235-security
ras-auth-int-rx
458
Command
SmartWare Software Configuration Guide
Purpose
Sets the master password (32 hex digits, 0-9,
A-F) with which the H.235 password is
decrypted.
Note: configure the master password only over
secure links (e.g. in LAN environments only or
with serial connection), which cannot be wire-
tapped.
Generates H.235 password by means of the
master password with the encryption tool.
Sets the password used for crypto token cal-
culation. The password is entered encrypted.
The password to be entered is the output of
the tool 'getcryptopassword.exe'.
Configures the password used for crypto
hashed token calculation. The password is
entered in clear text (min. 1, max. 12 alpha-
numeric characters).
N.B.: Do not use this command over insecure
links (subject to wiretapping). If you enter the
password as clear text, you don't need to con-
figure a master-password.
Sets the time window used for timestamp com-
parison by H.235. If a received H.323 mes-
sage with H.235 crypto token has a timestamp
outside the time window (relative to the local
time) the message is refused.
General there exist two H.235 versions. Use
'v1' if 'v2' does not work. In 'v1' "sender-id"
and "general-id" must not be specified.
Sets the ID of the Node. Must be a string con-
taining 2, 4, 6, ... characters.
Sets the ID of the entity to which the message is
sent, e.g. a gatekeeper. Must be a string con-
taining 2, 4, 6, ... characters.
Enablesor disables H.235 security for received
RAS packets.
Gateway configuration task list