Radius Authentication - Avaya G250 Administration

Accessing the Avaya G250/G350 Media Gateway
The process of establishing an SCP session is the same process as described in
support on page 44, except that the roles of the G250/G350 and the client computer are
reversed.
To perform file transfers secured by SCP, the G250/G350 launches a local SSH client via the
CLI. This establishes a secured channel to the secured file server. The G250/G350
authenticates itself to the server by providing a user name and password. With a
Windows-based SSH server (WinSSHD), the user name provided must be a defined user on
the Windows machine with read/write privileges. The files transferred via SCP are saved in the
C:\Documents and Settings\username directory.
Use the clear ssh-client known-hosts command to clear the client's list of SCP server
fingerprints. Each SCP client maintains a list of server fingerprints. If a key changes, the client's
verification of the server's fingerprint will fail, thereby preventing the client's access to the SCP
server. If this happens, you can use the clear ssh-client known-hosts command to
erase the client's server fingerprint list. This enables the client to access the server and begin to
recreate its list of fingerprints with the SCP server's new fingerprint.
The network element performs file transfer in unattended mode.

RADIUS authentication

If your network has a RADIUS server, you can configure the G250/G350 to use RADIUS
authentication. A RADIUS server provides centralized authentication service for many devices
on a network. When you use RADIUS authentication, you do not need to configure usernames
and passwords on the G250/G350. When you try to access the G250/G350, the G250/G350
searches for your username and password in its own database first. If it does not find them, it
activates RADIUS authentication.
To use RADIUS authentication:
1. Configure your RADIUS server with the usernames, passwords, and privilege levels that
you want to use on the G250/G350.
2. Configure RADIUS authentication on the G250/G350, as described below.
Use the following commands to configure RADIUS authentication on the G250/G350. For more
information about these commands, see the Avaya G250 and Avaya G350 CLI Reference,
03-300437.
1. Use the set radius authentication enable command to enable RADIUS
authentication.
2. Use the set radius authentication secret command to set the shared secret for
the authentication. This command must be followed by a text string. For example:
set radius authentication secret hush
3. Use the set radius authentication server command to set the IP address of the
primary or secondary RADIUS Authentication server.
46 Administration for the Avaya G250 and Avaya G350 Media Gateways
SSH protocol