Bay Networks Baystream 7 Configuration And Troubleshooting Manual page 43

2.
3.
Note: The system administrator can change the default requirements for the
Dial VPN username format as needed.
4.
115623B Rev. 00
User information usually is a user name and a password.
The remote node sends a PPP packet to start the connection process.
The NAS receives the data packet and passes the username to the TMS on
the Dial VPN service provider's network to determine how to process the
packet.
For Dial VPN, the username must contain one "at" sign (@), followed by at
least one period (.) and at least a 3-character extension. For example, the
username can be lee@abc.com. In this example, lee is the username part that
the NAS uses for authentication. The string @abc.com is the domain name
part that Dial VPN uses to look up this user's entry in the TMS database.
If TMS finds a match in its database for both the user and domain names, it
determines that this user is a Dial VPN user and a candidate for tunnel
creation. TMS then checks that the number of current connections does not
exceed the maximum number of users allowed.
If the user is not a tunnel candidate, the NAS first treats the request as a proxy
RADIUS request and attempts to authenticate this user in the usual way. Refer
to the description of proxy RADIUS in the BSAC Administration Guide for
your platform.
If the dial-in request is a tunnel candidate, the NAS starts the
authentication process and builds a tunnel.
Once it has determined that this request is a tunnel candidate, TMS tells the
NAS to contact the gateway for remote authentication, where authentication
and address allocation will take place. For a given domain, authentication and
address allocation can take place locally, using ACP (in an erpcd-based
network), or remotely, using RADIUS and DHCP on the customer's network.
If the request is not a tunnel candidate, the NAS uses local (instead of remote)
authentication.
The NAS receives the remote node's address, the source of which depends on
the type of authentication and the type of IP address allocation.
BayStream Multiservice Software Version 7.2
Dial VPN Network Concepts
2-11