Note:
The 9600 Series IP Deskphones support the SNMPv2c protocol, which is not secure.
• Restrict dial pad access to Local Administration Procedures, such as specifying IP
addresses, with a password.
• Restrict dial pad access to Craft Local Procedures to experienced installers and technicians.
• Restrict the ability of the user to use a phone Options application to view network data.
• Download and use third-party trusted certificates.
Registration and Authentication
Avaya call servers support using the extension and password to register and authenticate 9600
Series IP deskphones. For more information, see the current version of your call server
administration manual.
Secure Shell Support
The phone supports the Secure Shell (SSH) v2 protocol. The SSH protocol is a tool that the Avaya
services organization can use to remotely connect to IP deskphones to monitor, diagnose, or
debug deskphone performance. Because of the sensitive nature of remote access, you can
disable permission with the SSH_ALLOWED parameter.
The deskphone displays a security warning message at start of the session. You can specify your
own file using SSH_BANNER_FILE, or the deskphone will use the following default file:
This system is restricted solely to authorized users for legitimate
business purposes only. The actual or attempted unauthorized access,
use, or modification of this system is strictly prohibited.
Unauthorized users are subject to company disciplinary procedures and
or criminal and civil penalties under state, federal, or other
applicable domestic and foreign laws. The use of this system may be
monitored and recorded for administrative and security reasons. Anyone
accessing this system expressly consents to such monitoring and
recording, and is advised that if it reveals possible evidence of
criminal activity, the evidence of such activity may be provided to
law enforcement officials. All users must comply with all corporate
instructions regarding the protection of information assets.
The Avaya technician can match the SSH fingerprint displayed under debug with the fingerprint
present in the SSH client. This information is used to verify whether the administrator is logged on
to the correct SSH server. The SSH fingerprint is not displayed when the FIPS mode is enabled.
The deskphones support 2048-bit asymmetric key length for SSH server.
You can also administer the SSH_IDLE_TIMEOUTparameter to configure the duration of inactivity
that will disable SSH.
Time-to-Service
The Time-to-Service (TTS) feature changes the way IP phones register with their gatekeeper,
reducing the time to come into service.
Network requirements
March 2018 Administering Avaya 9608/9608G/9611G/9621G/9641G/9641GS IP Deskphones H.
323 37
Comments on this document? infodev@avaya.com
To Next Page
Loading...
