Avaya 3.7 - Manual (Page 276)

Device management
276 Avaya VPNmanager Configuration Guide Release 3.7
Note:
Note:
To restrict access to hosts or networks, Firewall rules limit access from specific
zones. See
Appendix B: Firewall rules template on page 297 .
To set up SSH or Telnet
1. Move to the Configuration Console window.
2. From the Icon tool bar, click Devices to list all security gateways in the Contents column.
3. From the Contents column, select the security gateway to configure for SSH or Telnet
connection.
4. Click the Management tab, to bring it to the front.The SSH/Telnet page is displayed.
5. By default SSH is enabled and the port 22 is configured, and Telnet is disabled. Make the
appropriate changes to enable or disable either or both of these and to change the port if
required
6. In the Allowed area, select Zones to set which zones can be used. The SSH/Telnet Zones
Configuration dialog is displayed, and the zones that are configured as listed.
7. For SSH, by default, the private zone is allowed.
8. For Telnet, you must select a zone as all zones are disabled by default.
9. Move the zones from Blocked to Allowed. Click OK.
10. Select Networks, to configure the IP address to use to access the security gateway
●
To add an IP address, click Add, enter the address and click OK.
● To add network objects, from Available list, select the network object and click Move
Left to the Allowed column. Click OK.
For SSH, by default Any is allowed.
11. Click Save and then click Update Devices to send the configuration change to the security
gateway.
Changing device administrator’s passwords
The following security gateway administrators configure and monitor the security gateway.
●
Super user is the VPNmanager centralized management administrator. The VPNmanager
super user has full read and write privileges to configure and monitor security gateways.
The super user name and the password are entered from the VPNmanager console and
are authenticated before VPNmanager is used to make configuration changes on the
security gateway. For centralized management, the security gateway must have the Permit
Centralized Management feature enabled. See the VPNos Configuration Guide for details.