User`s manual

SIP User's Manual 124 Document #: LTRT-83303
Mediant 1000 & Mediant 600
Table 3-26: General Security Parameters
Parameter Description
HTTP Authentication Mode
[WebAuthMode]
Determines the authentication mode for the Web interface.
 [0] Basic Mode = Basic authentication (clear text) is used (default).
 [1] Digest When Possible = Digest authentication (MD5) is used.
 [2] Basic if HTTPS, Digest if HTTP = Digest authentication (MD5)
is used for HTTP, and basic authentication is used for HTTPS.
Note: When RADIUS login is enabled (i.e., the parameter
WebRADIUSLogin is set to 1), basic authentication is forced.
Secured Web Connection
(HTTPS)
[HTTPSOnly]
Determines the protocol types used to access the Web interface.
 [0] Disable = HTTP and HTTPS (default).
 [1] Enable = Unencrypted HTTP packets are blocked.
TLS version
[TLSVersion]
Defines the supported versions of SSL/TLS (Secure Socket
Layer/Transport Layer Security.
 [0] SSL 2.0-3.0 and TLS 1.0 = SSL 2.0, SSL 3.0, and TLS 1.0 are
supported (default).
 [1] TLS 1.0 Only = only TLS 1.0 is used.
When set to 0, SSL/TLS handshakes always start with SSL 2.0 and
switch to TLS 1.0 if both peers support it. When set to 1, TLS 1.0 is
the only version supported; clients attempting to contact the device
using SSL 2.0 are rejected.
Voice Menu Password
[VoiceMenuPassword]
Password for the voice menu used for configuration and status. To
activate the menu, connect a POTS telephone and dial *** (three
stars) followed by the password.
The default value is 12345.
For detailed information on the voice menu, refer to the device's Fast
Track Guide.
Note: This parameter is applicable only to Mediant 1000.
General RADIUS Settings
Enable RADIUS Access
Control
[EnableRADIUS]
Determines whether the RADIUS application is enabled.
 [0] Disable = RADIUS application is disabled (default).
 [1] Enable = RADIUS application is enabled.
Use RADIUS for Web/Telnet
Login
[WebRADIUSLogin]
Uses RADIUS queries for Web and Telnet interface authentication.
 [0] Disable (default).
 [1] Enable.
When enabled, logging in to the device's Web and Telnet embedded
servers is performed via a RADIUS server. The device contacts a
predefined server and verifies the given user name and password pair
against a remote database, in a secure manner.
Notes:
 The parameter EnableRADIUS must be set to 1.
 RADIUS authentication requires HTTP basic authentication,
meaning the user name and password are transmitted in clear text
over the network. Therefore, it's recommended to set the
parameter HttpsOnly to 1 to force the use of HTTPS, since the
transport is encrypted.