User's Manual 1102 Document #: LTRT-10632
Mediant 800B Gateway & E-SBC
Parameter Description
TLS Expiry Check Start
expiry-check-start
[TLSExpiryCheckStart]
Defines the number of days before the installed TLS server
certificate is to expire at which the device must send a trap
(acCertificateExpiryNotification) to notify of this.
The valid value is 0 to 3650. The default is 60.
TLS Expiry Check Period
expiry-check-period
[TLSExpiryCheckPeriod]
Defines the periodical interval (in days) for checking the TLS
server certificate expiry date.
The valid value is 1 to 3650. The default is 7.
TLS FIPS 140 Mode
[TLS_Fips140_Mode]
Enables FIPS 140-2 conformance mode for TLS.
[0] Disable (default)
[1] Enable
72.5.5 SSH Parameters
Secure Shell (SSH) parameters are described in the table below.
Table 72-28: SSH Parameters
Parameter Description
Enable SSH Server
configure system > cli-settings
> ssh
[SSHServerEnable]
Enables the device's embedded SSH server.
[0] Disable (default)
[1] Enable
Server Port
configure system > cli-settings
> ssh-port
[SSHServerPort]
Defines the port number for the embedded SSH server.
Range is any valid port number. The default port is 22.
SSH Admin Key
configure system > cli-settings
> ssh-admin-key
[SSHAdminKey]
Defines the RSA public key for strong authentication for logging in
to the SSH interface (if enabled).
The value should be a base64-encoded string. The value can be a
maximum length of 511 characters.
Note: The parameter is overridden by the SSH public key
configured for a specific management user in the Local Users table
(see Configuring Management User Accounts on page 79).
Public Key
configure system > cli-settings
> ssh-require-public-key
[SSHRequirePublicKey]
Enables RSA public keys for SSH.
[0] Disable = (Default) RSA public keys are optional if a value is
configured for the parameter SSHAdminKey.
[1] Enable = RSA public keys are mandatory.
Note: To define the key size, use the TLSPkeySize parameter.
Max Payload Size
ssh-max-payload-size
[SSHMaxPayloadSize]
Defines the maximum uncompressed payload size (in bytes) for
SSH packets.
The valid value is 550 to 32768. The default is 32768.
Max Binary Packet Size
configure system > cli-settings
> ssh-max-binary-packet-size
[SSHMaxBinaryPacketSize]
Defines the maximum packet size (in bytes) for SSH packets.
The valid value is 582 to 35000. The default is 35000.