Bay Networks 5390 Administering page 199

In parsing the acp_dialup file, ACP uses a first-match algorithm keyed on the format of the
Remote address field, as well as on the contents of the User and Annex fields. That is, if an
entry matches the user name and Model 5390 address, but the Remote address is not of the
form network : node , no match is found. In this case, the Model 5390 server uses the values, if
any, set for the port parameters ppp_ipx_node and ppp_ipx_network (see page A-14). If
network : node is configured properly in the acp_dialup file and ppp_ipx_node and
ppp_ipx_network are also set, the acp_dialup values are used and the port parameters are
ignored.
If you specify an asterisk (*) for either the network or node portion of the remote address, the
PC is allowed to choose the network or node number during NCP negotiation. If you set both
portions of the address to asterisk (*:*), the remote client is allowed to choose both the network
number and the node number. If you specify * for both portions of the address and the remote
client does not try to negotiate an address, the Model 5390 server:
• Sets node to the Model 5390 server's own Ethernet address
plus one (1).
• Sets network to a unique, randomly generated value.
16
Set the Model 5390 parameter enable_security to Y so that the Model 5390 server uses
the acp_dialup file and any other security features you configure.
17
Set the dialup_addresses parameter to Y so that the Model 5390 server requests the end
point addresses from the acp_dialup file.
If dialup_addresses is set to
are defined in acp_dialup, the Model 5390 server uses the address defined by the port
parameters ppp_ipx_network and ppp_ipx_node. See IPXCP Configuration for Specific Ports
on page A9-14.
893-741-B
CAUTION: Unless you specify an asterisk for the network number, the
Model 5390 server always uses the number you specify in acp_dialup,
even if the PC client tries to negotiate a higher number. This is not com-
pliant with the IPXCP RFC 1552, which states that the highest number
should be used. However, giving control of the network number to the
Model 5390 server provides better security. The only problem is that if
the PC client suggests a higher number during NCP negotiation, the
client may refuse the Model 5390 number and the IPXCP connection
will not be established. If this is a concern for you, configure the IPXCP
network number via the port parameter ppp_ipx_network, which
always uses the highest value.
, or if it is set to
N
Internetwork Packet Exchange (IPX) Protocol
but no IPXCP addresses of the proper form
Y
A9-13