Table of Contents
Advertisement
Authentication Screen
If the authentication method is Radius, then the IP address of the Radius server and Radius Accounting
Server have to be entered and the user credentials are handled by the Radius server.
If the authentication method is local, the Local User Database defines the user credentials.
For RAS calls, dial-in PPP, a second static IP address is needed in the Remote Host Address field. This
address is for the dial-in user, PPP peer. This address needs to be on the same subnet, network number,
as that of the MultiAccess.
Field Name
Values
Authentication Setup Fields
Authentication
local or
Type
radius
n.n.n.n
Remote Host
Address
Radius Client Setup Fields
RADIUS Server
n.n.n.n
Address 1
Port
numeric
RADIUS
n.n.n.n
Accounting
Address 1
Port
Numeric
Secret
Alpha-
numeric
Multi-Tech Systems, Inc. MultiAccess ACS User Guide
Authentication Screen Field Definitions
Local Authentication refers to the Local User database on the MultiAccess.
Radius is a network specific protocol used to communicate authentication
requests between the authentication server and Radius client. User
credentials are stored within the Radius server. The MultiAccess is a Radius
client.
This is the IP address the MultiAccess will assign to the remote node, PPP
client, if one is not dictated by the Radius server which is included in the
authentication accept packet issued by the Radius server. This address
should be on the same network number as that of the MultiAccess.
IP address of the Radius Server providing remote user verification.
The UDP port number (ususally 1812) is used to communicate with the
Radius Server. The Radius server has to listen on the same set of UDP ports
that the Radius client, MultiAccess is using.
IP address of the Radius Accounting host. Radius accounting is a process
that starts after successful Radius authentication. The MultiAccess sends an
accounting start packet to the accounting server. When the user disconnects,
the MultiAccess sends an accounting stop packet to the accounting server.
Radius accounting summaries the time and date, duration, POTS port
connected and IP address given to the user for that call. Radius accounting
does not track the amount or type of data or places the user has been.
The UDP port number (usually 1813) is used to communicate with the Radius
Accounting host. The host has to listen on the same set of UDP ports that the
Radius client, MultiAccess, is using.
The secret is used by the Radius Server to encrypt and by the Radius Client
to unencrypt user passwords during exchanges of Radius authentication
packets. The client secret has to be identical to the one used by the Radius
server. MultiAccess implements MD5 encryption.
Chapter 4: Software
Description
25
Advertisement
Table of Contents
