asterisk users - Dec 2006 - Ssh access over a zap channel...

My need to do this through asterisk is simply the ability to provide me
access with no additional cost to my customer. It seems like a nice
thing to include as long as authentication is done well. I have worked
on a dozen or more types of switches and all of them have supported this
or had the capabilty through hardware or licensing. I am trying to get
around opening and closing the firewall, which at some locations is
simply not accessible to me.
 
Jordan Novak
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL:
http://lists.digium.com/pipermail/asterisk-users/attachments/20061214/1c3677e3/attachment.htm

On 14 Dec 2006, at 13:32, Jordan Novak wrote:
> My need to do this through asterisk is simply the ability to  
> provide me access with no additional cost to my customer. It seems  
> like a nice thing to include as long as authentication is done  
> well. I have worked on a dozen or more types of switches and all of  
> them have supported this or had the capabilty through hardware or  
> licensing. I am trying to get around opening and closing the  
> firewall, which at some locations is simply not accessible to me.
I'm setting a similar thing up for fall-back remote access,
I've decided to add ex-girlfriend mode to the
dialplan, so it won't get war-dialed, meaning I can only use it from  
specific phone numbers.

I've yet to test it, but the plan was:

PRI -> * -> dialplan checks callerId -> SIP-> spa 2000 ->
1200baud
modem -> tty socket-> unix login

Main advantage is that I have all the bits in the junk box in the  
machine room,
but it also doesn't open a generic IP tunnel (unless I run PPP at  
1200 baud).

Tim.

Jordan Novak wrote:
> My need to do this through asterisk is simply the ability to provide me 
> access with no additional cost to my customer. It seems like a nice 
> thing to include as long as authentication is done well. I have 
> worked on a dozen or more types of switches and all of them have 
> supported this or had the capabilty through hardware or licensing. I am 
> trying to get around opening and closing the firewall, which at some 
> locations is simply not accessible to me.
pbx-1*CLI> show application ZapRAS
pbx-1*CLI>
   -= Info about application 'ZapRAS' =-

[Synopsis]
Executes Zaptel ISDN RAS application

[Description]
   ZapRAS(args): Executes a RAS server using pppd on the given channel.
The channel must be a clear channel (i.e. PRI source) and a Zaptel
channel to be able to use this function (No modem emulation is included).
Your pppd must be patched to be zaptel aware. Arguments should be
separated by | characters.

pbx-1*CLI>