Lucent Technologies DEFINITY Enterprise Communication Server Release 8.2 Administrators Guide

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
About this document 
xxi Trademarks and service marks 
!SECURITY ALERT:
Indicates when system administration may leave your system open to toll 
fraud.
Trademarks and service marks
The following are trademarks or registered trademarks of Lucent Technologies:
n5ESS™, 4ESS™
nAUDIX®
nCallvisor®
nCallmaster®
nCentreVu™
nCONVERSANT®
nDEFINITY®
nDIMENSION®
nIntuity™
nMERLIN®
nVOICE POWER®
The following are trademarks or registered trademarks of AT&T:
nACCUNET®
nDATAPHONE®
nMEGACOM®
nMULTIQUEST®
nTELESEER®
The following are trademarks or registered trademarks of other companies:
nAcrobat® is a registered trademark of Adobe Systems Incorporated
nAscend® (registered trademark of Ascend, Inc.)
nAudichron® (registered trademark of the Audichron Company)
nMS-DOS® (registered trademark of the Microsoft Corporation)
nMicroChannel® (registered trademark of IBM Systems)
nMicrosoft® (registered trademark of Microsoft Corporation)
nMULTIQUEST® (registered trademark of Telecommunications Service) 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
About this document 
xxii How to get this book on the web 
nNetMeeting® (registered trademark of Microsoft Corporation)
nPictureTel® (registered trademark of PictureTel Corporation) 
nProShare® (registered trademark of Intel Corporation)
nUNIX® (trademark of the Novell Corporation)
nZydacron (registration pending for Zydacron Corporation)
How to get this book on the web
If you have internet access, you can view and download the latest version of 
DEFINITY ECS Administrator’s Guide. To view the book, you must have a copy 
of Acrobat Reader.
To access the latest version:
1. Access the Customer Self-Service Center web site at
http://support.lucent.com
2. Click Information Resources.
3. Click ELMO.
4. Enter your IL to access the library.
5. Enter 
555-233-506 (the document number) to view the latest version of the 
book.
How to order more copies
Call: Lucent Technologies Publications Center
Voice 1-800-457-1235
Fax 1-800-457-1764
International Voice 317-322-6416
International Fax 317-322-6699
Write: Lucent Technologies Publications Center
2855 N. Franklin Road, Indianapolis, IN 46219
Order: Document No. 555-233-506
Comcode 108678798, Issue 1, April 2000
We can place you on a standing order list so that you will automatically receive 
updated versions of this book. For more information on standing orders, or to be 
put on a list to receive future issues of this book, please contact the Lucent 
Technologies Publications Center. 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
About this document 
xxiii How to get help 
How to get help
If you need additional help, the following services are available. You may need to 
purchase an extended service agreement to use some of these services. See your 
Lucent Technologies representative for more information. 
Tell us what you think
Let us know what you like or don’t like about this book. Although we can’t 
respond personally to all your feedback, we promise we will read each response 
we receive. You can use the comment card at the back of the book or send us your 
feedback in your own format.
Write to us at: Lucent Technologies
Product Documentation Group
Room 22-2H15
11900 North Pecos Street
Denver, CO 80234 USA
Fax to:  303-538-1741
Send email to: [email protected]
nDEFINITY Helpline (for help with feature 
administration and system applications)+1-800-225-7585
nLucent Technologies National Customer Care Center 
Support Line (for help with maintenance and repair)+1-800-242-2121
nLucent Technologies Toll Fraud Intervention +1-800-643-2353
nLucent Technologies Corporate Security +1-800-822-9009
nLucent Technologies Centers of Excellence
— Asia/Pacific +65-872-8686
— Western Europe/Middle East/South Africa +441-252-391-889
— Central/Eastern Europe +361-270-5160
— Central/Latin America Caribbean +1-303-538-4666
— North America +1-800-248-1111 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
About this document 
xxiv Tell us what you think  
						

							System basics 
1 Logging into the system 
1
DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
1
System basics
This section provides the basic step-by-step procedures you need to manage your 
DEFINITY ECS. It explains how to log in and log off, set permissions for others 
who use the administration terminal, set daylight savings rules, set date and time, 
post messages, and back up the information you administer.
Logging into the system
You must log in before you can administer your system. If you are performing 
remote administration, you must establish a remote administration link and 
possibly assign the remote administration extension to a hunt group before you 
log in. The members of this hunt group are the extensions of the data modules 
available to connect to the system administration terminal. For information about 
setting up remote administration, contact your Lucent representative.
NOTE:
Change your password frequently, at least once a month, to help keep 
hackers out of your system. For instructions on how to change your 
password, refer to ‘‘
Changing passwords’’ on page 326.
When not using the system, log off for security purposes. 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
System basics 
2 Logging into the system 
1
Instructions
Logging into the system
This procedure provides instructions for logging in from the system terminal not a 
remote terminal. 
To log into the system:
1. Enter your login name and press 
RETURN. 
2. Enter your password and press 
RETURN.
For security, your password does not display as you type it. 
3. Enter the kind of terminal you have or the type your system emulates and 
press 
RETURN.
The Command prompt appears. 
NOTE:
If you enter the wrong terminal type, it can lock up your system. If 
the system is not responding to keyboard commands, type 
newterm 
and press RETURN. Enter the correct terminal type on the new screen 
and press 
RETURN. If this does not work, turn the power off only on 
the terminal and then turn it back on. The terminal reboots and you 
can login again.
Logging in for remote administration
To log in for remote administration:
1. Dial the Uniform Call Distribution (UCD) group extension number.
NOTE:
The UCD group extension number is assigned when you set up 
remote administration.
nIf you are off-premises, use the Direct Inward Dialing (DID) 
number, an Listed Directory Number (LDN) (you must use a 
phone), or the trunk number dedicated to remote administration.
nIf you are on-premises, use an extension number.
If you dialed a DID number, dedicated trunk number, or extension, 
you receive data tone or visually receive answer confirmation. 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
System basics 
3 Logging in with Access Security Gateway 
1
If an LDN was dialed, the attendant will answer. 
a. Ask to be transferred to the UCD group extension number.
You receive data tone or visually receive answer 
confirmation. 
b. Transfer the voice call to your data terminal.
The Login prompt appears.
2. Complete the steps for ‘‘
Logging into the system’’ on page 1. 
For information about setting up remote administration, contact your 
Lucent representative.
Logging in with Access Security 
Gateway
Access Security Gateway (ASG) is an authentication interface used to protect the 
system administration and maintenance ports and logins on DEFINITY ECS. 
ASG uses a challenge and response protocol to validate the user and reduce 
unauthorized access. 
You can administer ASG authentication on either a port type or login ID. If you 
set ASG authentication for a specific port, it restricts access to that port for all 
logins. If you set ASG authentication for a specific login ID, it restricts access to 
that login, even when the port is not administered to support ASG. 
Authentication is successful only when DEFINITY ECS and ASG communicate 
with a compatible key. You must maintain consistency between the Access 
Security Gateway Key and the secret key assigned to the DEFINITY ECS login. 
For more information about ASG, refer to ‘‘
Using access security gateway’’ on 
page 319.
Before you start
Before you can log into the system with ASG authentication, you need an Access 
Security Gateway Key, and you need to know your personal identification number 
(PIN). The Access Security Gateway Key must be pre-programmed with the same 
secret key (such as, ASG Key, ASG Passkey, or ASG Mobile) assigned to the 
DEFINITY ECS login. 
Verify that the Access Security Gateway (ASG) field on the System-Parameters 
Customer Options screen is set to 
y. If not, contact your Lucent representative. 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
System basics 
4 Logging off the system 
1
Instructions
To log into the system with ASG:
1. Enter your login ID and press 
RETURN.
The system displays the challenge number (for example, 555-1234) and 
system Product ID number (for example, 1000000000). The Product ID 
provides Lucent Services with the specific DEFINITY ECS system 
identifier.
2. Press 
ON to turn on your Access Security Gateway Key.
3. Type your PIN and press 
ON.
The Access Security Gateway Key displays a challenge prompt.
4. At the challenge prompt on the Access Security Gateway Key, type the 
challenge number without the “-” character (for example, 5551234) from 
your screen and press 
ON.
The Access Security Gateway Key displays a response number (for 
example, 999-1234).
5. At the response prompt on your terminal, type the ASG response number 
without the “-” character (for example, 9991234) and press 
RETURN.
The Command prompt appears.
NOTE:
If you make 3 invalid login attempts, the system terminates the 
session. For more information, refer to the appropriate maintenance 
book for your system.
Fixing problems
When logging in failures occur, if you are a super-user, you can use the list 
asg-history command to determine the cause. The asg history log contains the last 
100 or 250 records depending on your system. This log contains the date and time, 
the port mnemonic, the login ID entered (correct or incorrect), and the status for 
each session attempt. For specific information about the ASG history log, refer to 
DEFINITY ECS Reports.
Logging off the system
For security, log off any time you leave your terminal. If you use terminal 
emulation software to administer the switch, log off the system and exit the 
emulation application before switching to another software package. 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
System basics 
5 Setting command permissions 
1
Instructions
To log off:
1. Type 
logoff and press RETURN. 
If the Facility Test Calls or Remote Access features are administered, 
Alarm origination is disabled, or if you have busied out resources or active 
minor or major alarms, a security screen appears. You may want to take 
appropriate action (for example, disable these features or address any 
alarms) before you log off.
If none of the above special circumstances exist, the system logs you off.
2. At the
 Proceed with Logoff prompt, type y to log off.
If you log off with alarm origination disabled and the system generates an 
alarm, Lucent support services will not receive any notification of the 
alarm. For more information about alarms, refer to the maintenance book 
for your system.
Setting command permissions
DEFINITY ECS allows you to modify the permissions associated with a login. 
The system maintains default permissions for each level of login, but you may 
want to further restrict the login, or at least make sure the defaults are appropriate 
for the user. The default values for these fields vary based on the login type.
When set to y, the permissions on the Command Permission Categories screen 
apply for any object that is not restricted. The second and third pages of the 
Command Permission Categories screen allow you to restrict the user from any 
access to specified objects. If you want to limit a user’s permissions beyond those 
on page one, enter the objects in this list. For example, if you want a user to be 
able to add and change stations, but not VDNs, you can enter 
y in the Administer 
Stations field and the Additional Restrictions field. Then on page 2 or 3, enter vdn 
as a restricted object.
     
Facility Test Call Administered
Remote Access Administered
Alarm Origination is currently disabled
Active major/minor alarm detected; be sure to resolve it
Proceed with Logoff? [n] 
						

							DEFINITY ECS Release 8.2
Administrator’s Guide  555-233-506  Issue 1
April 2000
System basics 
6 Setting command permissions 
1
Instructions
In our example, we set the permissions necessary to allow the user to administer 
daylight savings time rules.
To change command permissions:
1. Type 
change permissions sup3ru and press RETURN.
The Command Permission Categories
 screen appears.
2. Type 
y in the Display Admin and Maint Data field.
3. Type 
y in the Administer Features field.
4. Press 
ENTER to save your work.
More information
There are 2 types of users — superuser and non-superuser.
nA superuser provides access to the add, change, display, list, and remove 
commands for all customer logins and passwords. The superuser can 
administer any mix of superuser/nonsuperuser logins. The superuser can 
administer between 10 and 19 logins depending on your system.
nA nonsuperuser may change their password with permission set by the 
superuser. However, once a password has been changed, the nonsuperuser 
must wait 24 hours before changing the password again. 
 
                           COMMAND PERMISSION CATEGORIES
                             Login Name: sup3ru
   COMMON COMMANDS
                  Display Admin. and Maint. Data? y
                             System Measurements? y
   ADMINISTRATION COMMANDS
         Administer Stations? y             Administer Features? y
           Administer Trunks? y          Administer Permissions? y
     Additional Restrictions? n
   MAINTENANCE COMMANDS
           Maintain Stations? n       Maintain Switch Circuit Packs? n
             Maintain Trunks? n      Maintain Process Circuit Packs? n
            Maintain Systems? n  Maintain Enhanced DS1? n