Table 5-35: General Security Settings Parameters (Continues On Pages 168 To 169) - AudioCodes Mediant 1000 User Manual

Table 5-35: General Security Settings Parameters (continues on pages 168 to 169)

Parameter
Secured Web Connection
[HTTPSOnly]
HTTP Authentication Mode
[WebAuthMode]
Voice Menu Password
[VoiceMenuPassword]
RADIUS General Settings
Enable RADIUS Access Control
[EnableRADIUS]
Use RADIUS for Web/Telnet
Login
[WebRADIUSLogin]
RADIUS Authentication Server IP
Address
[RADIUSAuthServerIP]
RADIUS Authentication Server
Port
[RADIUSAuthPort]
RADIUS Shared Secret
[SharedSecret]
RADIUS Authentication Settings
Default Access Level
[DefaultAccessLevel]
Device Behavior Upon RADIUS
Timeout
[BehaviorUponRadiusTimeout]
H.323 User's Manual
Description
Determines the protocol types used to access the Embedded Web Server.
HTTP and HTTPS [0] (default).
HTTPS only [1] (unencrypted HTTP packets are blocked).
Determines the authentication mode for the Embedded Web Server.
Basic [0] = Basic authentication (clear text) is used (default).
Digest When Possible [1] = Digest authentication (MD5) is used.
Basic if HTTPS, Digest if HTTP [2] = Digest authentication (MD5) is used for
HTTP, and basic authentication is used for HTTPS.
Note that when RADIUS login is enabled (WebRADIUSLogin = 1), basic
authentication is forced.
Password for the voice menu, used for configuration and status. To activate
the menu, connect an analog telephone and dial *** (three stars) followed by
the password.
The default value is 12345.
For detailed information on the voice menu, refer to Section
49.
Enables / disables the RADIUS application.
Disable [0] = RADIUS application is disabled (default).
Enable [1] = RADIUS application is enabled.
Uses RADIUS queries for Web and Telnet interface authentication.
Disable [0] (default).
Enable
[1].
When enabled, logging to the gateway's Web and Telnet embedded servers
is performed via a RADIUS server. The gateway contacts a predefined
server and verifies the given username and password pair against a remote
database, in a secure manner.
Note 1: The parameter 'EnableRADIUS' must be set to 1.
Note 2: RADIUS authentication requires HTTP basic authentication,
meaning the username and password are transmitted in clear text over the
network. Therefore, users are recommended to set the parameter 'HttpsOnly
= 1' to force the use of HTTPS, since the transport is encrypted.
IP address of the RADIUS authentication server.
Port number of the RADIUS authentication server.
The default value is 1645.
'Secret' used to authenticate the gateway to the RADIUS server. Should be a
cryptographically strong password.
Defines the default access level for the gateway when the RADIUS
(authentication) response doesn't include an access level attribute.
The valid range is 0 to 255. The default value is 200 (Security Administrator').
Defines the gateway's operation if a response isn't received from the
RADIUS server after the 5 seconds timeout expires:
Deny Access [0] = the gateway denies access to the Web and Telnet
embedded servers.
Verify Access Locally [1] = the gateway checks the local username and
password (default).
168
Mediant 1000
4.2.3 on page
Document #: LTRT-83401