Help with ASG

penelope · July 27th, 2007, 11:15 AM

I have a system in Ireland that I am unable to get connected to via INADS dialup, I can get on via IP just fine.

When I try to log in via INADS I get the Login: prompt, enter my ID, then it comes up with ACCESS DENIED, doesn't even prompt for Password.

I found that there is an Access Security Gateway setting on the login ID form. I created a test ID, told it YES on the ASG, then it comes up with a second screen. I set it to System Generated Key =N and created my own key complying to what it kept telling me the format must be. It accepted it. When I dialup using this test ID I log in and instead of a password prompt I get a Challenge and Response. What is this? I read a little about it in the Definity manual but it's not clear if this is a physical device, a setting, and it sounds like I would enter the Challenge into SOMETHING or SOMEWHERE and generate a Response.

The company that supports that office says they have no idea what we are talking about. We certainly didn't set that up and I have never seen that on any of my systems. I never have to DIAL into that system, I use IP. We needed dialup access in order to change the IP address and it took a week to get that company to do it.

ACCESS SECURITY GATEWAY LOGIN ADMINISTRATION
Blocked? n
System Generated Secret Key? Secret Key:

EXPIRATION CRITERIA
Expiration Date: / /
Number of Sessions:
Restrict Days of Week
Monday? n Tuesday? n Wednesday? n Thursday? n Friday? n
Saturday? n Sunday? n
Restrict From Time: : Restrict To Time: :

martinyoung · July 27th, 2007, 12:18 PM

Lets ask the easy question first. Type "display sys maint" and verify that the field allowing customer access to INADS is set to yes.

penelope · July 27th, 2007, 12:27 PM

THANK YOU! Yep, it's set to NO. I tried to change it and it will not let me (I can only do a display, not change). I have run into many things that it will not let me do on that system that I can do on every other system. Is it because we got the maintenance access on the other systems? At least I believe that is what Avaya called it, we had to pay for it.

I did find that the ASG setting in the sys param sec is set to YES.

martinyoung · July 27th, 2007, 01:25 PM

I do not know if you need maintenance permissions to have customer access to INADS but only Avaya or an Avaya Business Partner can change that field.

To finish answering your question, there are two ways to see if you have maintenance permissions in that switch.

The quick one is to type "busy" and then hit "help". If your only choice is "mis", you do not have permissions. The other way is to type "display sys cust" and look for the features that end with "MSP". Those are the maintenance permissions.

A-Train · July 30th, 2007, 09:27 AM

I am not sure, but I know that we got a Pro Logics a few years ago (running release 11) and had a similar issue. Customer level logins can access the system via SAT terminal or IP, but not via INADS line. When we tried to log in via INADS it simply rejected our login as if we were not recognized users. There was no "INADS access" field in the change login field or under permissions. It was a bit of a shock to us at the time when this happened. Fortunately most of our admin is done via IP, and out BP is very understanding about dialing in for us if we have a trouble with IP. I am not sure if this is something that would be classified as a "maintenance permissions" issue. I know our older systems (release 9s) all kept the ability for customer level INADS access after they yanked the maintenance permissions. It was only the newer system that lost (or really never had) that ability. Fortunately our Avaya rep had gone into hiding by the time they did that, so I couldn't strangle them when I found I couldn't test that T1 that was having problems that particular day. I am not sure if someone else got to the Avaya rep before me, because we haven't heard from them since. I hear rumors from different BPs that we have one, but we have no idea who it is. I sure love Avaya products, but whoever is in charge of their business and customer relations needs a little help. Thank goodness we have a great Business Partner or I would have had a coronary long ago. Sorry for the rant...

martinyoung · July 30th, 2007, 10:12 AM

The INADS access permission field is on the system maintenance screen. I believe that if that field says no, the option to use the INADS port does not appear anywhere else.

Penelope, you can confirm that. Since your permission field is set to no, does the option to use the INADS port appear on the change login page?

July 27th, 2007, 11:15 AM	#1 (permalink)
penelope PBXtech GOLD 100+ posts Join Date: May 2006 Posts: 177	Help with ASG I have a system in Ireland that I am unable to get connected to via INADS dialup, I can get on via IP just fine. When I try to log in via INADS I get the Login: prompt, enter my ID, then it comes up with ACCESS DENIED, doesn't even prompt for Password. I found that there is an Access Security Gateway setting on the login ID form. I created a test ID, told it YES on the ASG, then it comes up with a second screen. I set it to System Generated Key =N and created my own key complying to what it kept telling me the format must be. It accepted it. When I dialup using this test ID I log in and instead of a password prompt I get a Challenge and Response. What is this? I read a little about it in the Definity manual but it's not clear if this is a physical device, a setting, and it sounds like I would enter the Challenge into SOMETHING or SOMEWHERE and generate a Response. The company that supports that office says they have no idea what we are talking about. We certainly didn't set that up and I have never seen that on any of my systems. I never have to DIAL into that system, I use IP. We needed dialup access in order to change the IP address and it took a week to get that company to do it. ACCESS SECURITY GATEWAY LOGIN ADMINISTRATION Blocked? n System Generated Secret Key? Secret Key: EXPIRATION CRITERIA Expiration Date: / / Number of Sessions: Restrict Days of Week Monday? n Tuesday? n Wednesday? n Thursday? n Friday? n Saturday? n Sunday? n Restrict From Time: : Restrict To Time: : __________________ Penelope

July 27th, 2007, 12:18 PM	#2 (permalink)
martinyoung Moderator Join Date: Dec 2005 Posts: 1,401	Re: Help with ASG Lets ask the easy question first. Type "display sys maint" and verify that the field allowing customer access to INADS is set to yes. __________________ Marty Retired Avaya DSIC tech

July 27th, 2007, 12:27 PM	#3 (permalink)
penelope PBXtech GOLD 100+ posts Join Date: May 2006 Posts: 177	Re: Help with ASG THANK YOU! Yep, it's set to NO. I tried to change it and it will not let me (I can only do a display, not change). I have run into many things that it will not let me do on that system that I can do on every other system. Is it because we got the maintenance access on the other systems? At least I believe that is what Avaya called it, we had to pay for it. I did find that the ASG setting in the sys param sec is set to YES. __________________ Penelope

July 27th, 2007, 01:25 PM	#4 (permalink)
martinyoung Moderator Join Date: Dec 2005 Posts: 1,401	Re: Help with ASG I do not know if you need maintenance permissions to have customer access to INADS but only Avaya or an Avaya Business Partner can change that field. To finish answering your question, there are two ways to see if you have maintenance permissions in that switch. The quick one is to type "busy" and then hit "help". If your only choice is "mis", you do not have permissions. The other way is to type "display sys cust" and look for the features that end with "MSP". Those are the maintenance permissions. __________________ Marty Retired Avaya DSIC tech Last edited by martinyoung; July 27th, 2007 at 01:33 PM. Reason: Finish answering question

July 30th, 2007, 09:27 AM	#5 (permalink)
A-Train PBXtech GOLD 100+ posts Join Date: Sep 2006 Posts: 234	Re: Help with ASG I am not sure, but I know that we got a Pro Logics a few years ago (running release 11) and had a similar issue. Customer level logins can access the system via SAT terminal or IP, but not via INADS line. When we tried to log in via INADS it simply rejected our login as if we were not recognized users. There was no "INADS access" field in the change login field or under permissions. It was a bit of a shock to us at the time when this happened. Fortunately most of our admin is done via IP, and out BP is very understanding about dialing in for us if we have a trouble with IP. I am not sure if this is something that would be classified as a "maintenance permissions" issue. I know our older systems (release 9s) all kept the ability for customer level INADS access after they yanked the maintenance permissions. It was only the newer system that lost (or really never had) that ability. Fortunately our Avaya rep had gone into hiding by the time they did that, so I couldn't strangle them when I found I couldn't test that T1 that was having problems that particular day. I am not sure if someone else got to the Avaya rep before me, because we haven't heard from them since. I hear rumors from different BPs that we have one, but we have no idea who it is. I sure love Avaya products, but whoever is in charge of their business and customer relations needs a little help. Thank goodness we have a great Business Partner or I would have had a coronary long ago. Sorry for the rant...

Remove advertisements
PBXtech.info Advertisement	Sponsored links

July 30th, 2007, 10:12 AM	#6 (permalink)
martinyoung Moderator Join Date: Dec 2005 Posts: 1,401	Re: Help with ASG The INADS access permission field is on the system maintenance screen. I believe that if that field says no, the option to use the INADS port does not appear anywhere else. Penelope, you can confirm that. Since your permission field is set to no, does the option to use the INADS port appear on the change login page? __________________ Marty Retired Avaya DSIC tech Last edited by martinyoung; July 30th, 2007 at 10:15 AM. Reason: Ask a question

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode