Avaya 555-245-600 IP Phone User Manual


 
Small to mid-size enterprise
Issue 6 January 2008 51
Media modules necessary for each WAN line
The table below lists which media modules to install to connect each type of outside WAN line.
Management access security features
The G450 features the following management security mechanisms:
A basic authentication mechanism in which users are assigned passwords and privilege
levels
Support for user authentication provided by an external RADIUS server
SNMPv3 user authentication
Secure data transfer via SSH and SCP with user authentication
ASG authentication for remote service logins. ASG is a challenge-response authentication
method that is more secure than password authentication and does not require a static
password.
Network security features
The Avaya G450 Media Gateway provides the following network security features:
Private secure connections can be configured between the G450 and a remote peer, using
VPN (Virtual Private Network). VPN at the IP level is deployed using a standards-based
set of protocols defined by the IETF called IPSec. IPSec provides privacy, integrity, and
authenticity to information transferred across IP networks.
Protection against DoS (Denial of Service) attacks via:
- MSS notifications. The G450 identifies predefined or custom-defined traffic patterns as
suspected DoS attacks and generates SNMP notifications, referred to as Managed
Security Services (MSS) notifications. MSS notifications are intercepted and, if certain
conditions are met, may be forwarded to the Avaya Security Operations Center (SOC)
as INADS alarms. The SOC is an Avaya service group that handles DoS alerts,
responding as necessary to any DoS attack or related security issue.
Table 6: Outside WAN lines supported and matching media modules
WAN line Media modules
Universal Serial Port MM342
E1/T1 data lines MM340
PPPoE (ADSL modem) Chassis
Ethernet (DHCP/static IP)
(cable modem)
Chassis