Table of Contents
Advertisement
Configuring Individual WAN Connections
Enhanced support for MS-CHAP
Message sequence during an outgoing call using two RADIUS lookups
A call using two RADIUS lookups passes through the follow messaging sequence:
1
2
3
4
5
6
7
8
9
10 The called party responds with a challenge response.
11 The MAX unit sends the authentication request to RADIUS, which performs the second
12 The RADIUS server informs the MAX unit about whether the authentication was
13 If the authentication was successful, the MAX unit informs the called party that it has been
For detailed information about each attribute, see the TAOS RADIUS Guide and Reference.
Enhanced support for MS-CHAP
Support for the LAN Manager version of MS-CHAP enables you to specify MS-CHAP
authentication in RADIUS.
LAN Manager MS-CHAP support
LAN Manager and Windows 95 support a DES-based form of MS-CHAP. In the past, the
MAX unit was unable to support this form of authentication because it lacked knowledge of
the key used in password encryption. The MAX unit provides a key for encrypting passwords
by means of DES.
RADIUS support for MS-CHAP
RFC 2548 defines the VSA attributes necessary for supporting MS-CHAP authentication by
means of RADIUS. Two new VSA attributes are supported:
•
•
4-72
Ascend-Receive-Secret="pass",
Ascend-Route-IP=1
The MAX unit requests a dialout profile from RADIUS.
RADIUS sends the dialout profile to the MAX unit.
The MAX unit makes an ISDN call to the remote device.
The ISDN call is connected.
The MAX unit and the called party perform LCP exchanges.
The called party sends a challenge request to the MAX unit.
The MAX unit responds with a challenge response.
The called party informs the MAX unit about whether the first level of authentication has
been successful.
If the first authentication was successful, the MAX unit sends a challenge request to the
called party.
lookup.
successful.
authenticated.
MS-CHAP-Challenge
MS-CHAP-Response
MAX 6000/3000 Network Configuration Guide
Advertisement
Chapters
Table of Contents
