Version 7.0 873 Mediant 3000
User's Manual 58. Configuration Parameters Reference
Parameter Description
e]
defined Proxies Host names/IP addresses and is not marked as 'critical',
the Common Name (CN) of the Subject field is compared with this value.
If not equal, the TLS connection is not established. If the CN uses a
domain name, the certificate can also use wildcards (‘*’) to replace parts
of the domain name.
The valid range is a string of up to 49 characters.
Note: The parameter is applicable only if the parameter
PeerHostNameVerificationMode is set to 1 or 2.
TLS Expiry Check Start
[TLSExpiryCheckStart]
Defines the number of days before the installed TLS server certificate is
to expire at which the device must send a trap
(acCertificateExpiryNotification) to notify of this.
The valid value is 0 to 3650. The default is 60.
TLS Expiry Check Period
[TLSExpiryCheckPeriod]
Defines the periodical interval (in days) for checking the TLS server
certificate expiry date.
The valid value is 1 to 3650. The default is 7.
TLS FIPS 140 Mode
[TLS_Fips140_Mode]
Enables FIPS 140-2 conformance mode for TLS.
ï‚§ [0] Disable (default)
ï‚§ [1] Enable
58.4.5 SSH Parameters
Secure Shell (SSH) parameters are described in the table below.
Table 58-28: SSH Parameters
Parameter Description
Enable SSH Server
[SSHServerEnable]
Enables the device's embedded SSH server.
ï‚§ [0] Disable (default)
ï‚§ [1] Enable
Server Port
[SSHServerPort]
Defines the port number for the embedded SSH server.
Range is any valid port number. The default port is 22.
SSH Admin Key
[SSHAdminKey]
Defines the RSA public key for strong authentication for logging in to the
SSH interface (if enabled).
The value should be a base64-encoded string. The value can be a
maximum length of 511 characters.
Require Public Key
[SSHRequirePublicKey]
Enables RSA public keys for SSH.
ï‚§ [0] = (Default) RSA public keys are optional if a value is configured for
the parameter SSHAdminKey.
ï‚§ [1] = RSA public keys are mandatory.
Note: To define the key size, use the TLSPkeySize parameter.
Max Payload Size
[SSHMaxPayloadSize]
Defines the maximum uncompressed payload size (in bytes) for SSH
packets.
The valid value is 550 to 32768. The default is 32768.