Bay Networks 5390 Administering page 478

Using Model 5390 Security
If the user is not allowed to choose the PIN, the following text is displayed:
Press <Return> to generate a new PIN and display it,
or
<Ctrl-D> <Return> to leave your card in New-Pin mode.
If the user presses Return, the terminal displays the assigned PIN. If the user incorrectly reenters
the PIN or chooses to leave the card in New-Pin mode, the login attempt is terminated.
Configuring the Model 5390 Server for Use with SecurID
To use the SecurID card, security must be enabled on the Model 5390 server:
1
Set the following Model 5390 parameters to Y:
• enable_security
• vcli_security
2
Set the following Model 5390 port parameters to Y on each port:
• cli_security
• slip_ppp_security
• port_server_security
3
Set the Model 5390 port parameter ppp_security_protocol to none on each port.
If ppp_security_protocol is set to pap, the user will be prompted again for the user name and
passcode when using the CLI ppp command. The user must enter the PIN and SecurID card
code for the passcode.
4
Set the Model 5390 parameters password and vcli_password and the port parameter
port_password to the null string ("") if you want the ACE/Server system to authenticate
all login attempts before allowing access to the Model 5390 server. Also, do not set a
port password in the acp_passwd file when using SecurID.
5
Enter a host name or IP address for the pref_secure1_host and pref_secure2_host
parameters for each Model 5390 server using a SecurID card.
The host addresses where each ACP process runs must be registered in the ACE/Server
database as clients.
A15-58 893-741-B