Adding the ASBCE identity certificate SSH Error 2

[dsm600rr]

Hello all,

I am receiving this error, any idea why?

ACSS

 

[jamie77]

That command is not used on SBCE 8.0 and above.

Docs are not very clear, but you now upload the certs and key with the password using the web gui, so no need to do that part.

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[dsm600rr]

jamie77: Do I just skip this part and continue?

ACSS

 

[jamie77]

yup. cert should be fine just uploaded with the key in the gui.

on earlier SBCs, you did need to run this command.

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[dsm600rr]

jamie77: Thank you. Avaya drives me insane some times (a majority of the time).

ACSS

 

[dsm600rr]

jamie77: Is this the step you are referring to? I do notice in the documentation it does not mention entering a password in for the key at this point however it was required.

ACSS

 

[jamie77]

Thats the one. Docs on this are terrible and I wasted days doing exactlly the same as you!!

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer

 

[dsm600rr]

jamie77: Appreciate the help. Do you remember anything else along the way I should be aware of as far as documentation errors?

Currently I have my network topology as such. I do not see any reason to need to involve my firewall guy and put the SBCE after the firewall. The SBCE is a firewall, after all, correct? Unless you suggest me doing so for a reason I am not seeing.

With that being said, should I skip the firewall steps?

What about this step?

ACSS

 

[derfloh]

That's a relict für the use of OneX Portal of you connect OneX Mobile or Avaya Communicator. In that case you had to create an application relay or reverse Proxy dir port 9443. That wasn't possible as long as the given port range was 9000-9999.

If you only use IX Workplace and J-Series phones that step is not necessary.

IP Office remote service
IP Office certificate check
CLI based call blocking
SCN fallback over PSTN

 

[dsm600rr]

derfloh: Thank you. I will remove the port modification.

ACSS

 

[jamie77]

Put the SBC behind the firewall where ever possible to be part of a layered security model. But, I do have some SBC's with a direct internet facing B1 where we had no other choice.

Jamie Green

[bold]A[/bold]vaya [bold]R[/bold]egistered [bold]S[/bold]pecialist [bold]E[/bold]ngineer