Avaya IP Office: Default Credentials

Introduction

This post covers the default usernames and passwords used by the Avaya IP Office system. With the release of R9.1, there were a lot of changes focusing around security and not leaving passwords as default or too weak, but below is the list, just in case you need to ever carry out a Security Reset or are working on a brand new system.

Service User Accounts

Username Password
Administrator Administrator
BusinessPartner BusinessPartner
EnhTcpaService EnhTcpaPwd1
IPDECTService
Maintainer Maintainer
Manager Manager
Operator Operator
SCN_Admin
SMGRB5800Admin SMGRB5800Admin

It is strongly recommended to disable the following default Service User Accounts and create your own Service Users:

Administrator
Business Partner
Maintainer
Manager
Operator

Security Settings Account

Username Password
security securitypwd

It is strongly recommended to change this password, as leaving it default could allow anyone to reset the Security Settings to default and enable access to the system using default credentials.

System Accounts

Account Type Password
Monitor password
System password
Voicemail Pro

These accounts aren’t a massive priority to change (except for Voicemail Pro) as they only allow access to System Monitor and used for upgrading a system. As previously noted, the Voicemail Pro password is worth changing as this is where all call flows etc can be created and deleted.

Conclusion

As mentioned at the start of the post, it is recommended that the majority of these passwords are changed upon installation of new systems and strong passwords are implemented to avoid potential exploitation of the system.

 

Avaya IP Office: Reset Security Settings

Introduction

This How-To covers the reset of the Security Settings of an IP Office if you have been locked out from the config or don’t know what the Username/Password is to connect to it.

Please note, this will only work on IP Offices running R3.2 and higher as Security Settings were not present in versions earlier than this.

Steps:

1: Connect to the IP Office via DTE/Serial Cable

Connect to the IP Office using a DTE/Serial Cable via HyperTerminal or PuTTY using the following settings:

Bits per second: 38,400
Parity: None
Flow Control: None
Data Bits: 8
Stop Bits: 1
Settings | Emulation: TTY

2: Perform Security Reset Command

Once connected to the IP Office via DTE/Serial cable, enter the following command followed by Enter:

AT

This should give you an “OK” message. Once the “OK” message has been received, enter the following command and press Enter:

AT-SECURITYRESETALL

You should then be prompted to enter the MAC address of the control unit before you can continue. Once you have entered this, it should take about 1 minute before you get the resulting “OK” message.

Conclusion

You should now be able to login to the IP Office using the default Username/Password.