Radius Switch Administrator Authentication; Enable/Disable Pbnac 802.1X - Avaya G250 Technical White Paper

8. RADIUS Switch Administrator Authentication

If your network has a RADIUS server, you can configure the Avaya G350 Media
Gateway to use RADIUS authentication. A RADIUS server provides centralized
authentication service for many devices on a network. When you use RADIUS
authentication, you do not need to configure usernames and passwords on the
G350. When logging into the G350/G250, the G350/G250 searches for your
username and password in its own database first. If it does not find them, it
activates RADIUS authentication.
G350-002(super)# show radius authentication
Mode:
Primary-server:
Secondary-server:
Retry-number:
Retry-time:
UDP-port:
shared-secret:
G350-002(super)#
The Avaya G250/G350 Media Gateway includes a security mechanism through which
the system administrator defines users and assigns each user and username and
a password. Each user is assigned a privilege level. The user's privilege
level determines which commands the user can perform.
In addition to its basic security mechanism, the G250/G350 supports secure
data transfer via SSH and SCP.
The G250/G350 can be configured to work with an external RADIUS server to
provide user authentication. When RADIUS authentication is enabled on the
G250/G350, the RADIUS server operates in conjunction with the G250/G350
security mechanism. When the user enters a does not find the username in its
own database, it establishes a connection with the RADIUS server, and the
RADIUS server provides the necessary authentication services.

9. Enable/Disable PBNAC 802.1x

The G350 also uses the 802.1x protocol in conjunction with EAP within EAPOL
and over RADIUS to provide a means for authenticating and authorizing users
attached to a LAN port, and for preventing access to that port in cases where
the authentication process fails.
GPW/AMK ©2005 Avaya Inc. All Rights Reserved. Avaya and the Avaya logo are trademarks of Avaya Inc. and
may be registered in certain jurisdictions. All trademarks identified by ® and ™ are registered
trademarks or trademarks respectively, of Avaya Inc. All other registered trademarks or trademarks
Enable
192.168.1.205
172.16.1.205
4
5
1645
*****
are property of their respective owners.
15
Avaya G250/G350
Media Gateway
Security Features
Overview