System Security; Using Radius Authentication - ZyXEL Communications Prestige 128MH User Manual

Prestige 128MH PSTN Router/Hub
Chapter 11

System Security

Your Prestige incorporates a number of security measures to prevent unauthorized access to your
network. For example, your Prestige supports both PAP (Password Authentication Protocol) and
CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote Node.
By default, your Prestige can store information about up to eight different users. If more dial-up
users are necessary, an external RADIUS (Remote Authentication Dial In User Service) server
can be used to provide centralized user security.
In addition, your Prestige also implements a user password to get into the SMT screen. You will
have three attempts to enter the correct system password. If you do not do so, the SMT will kick
you out. In addition, your Prestige will only support one user in the SMT at one time.
11.1

Using RADIUS Authentication

Your Prestige router has a built-in dial-up user list, which can hold up to eight users.
For multiple (>8) dial-in users, your Prestige supports an external authentication server (UNIX or
NT server station) which may provide password storage and usage accounting for thousands of
users.
11.1.1 Installing a RADIUS Server
To use RADIUS authentication, you will need to have a UNIX- or NT-based machine on your
network to act as a [radiusd] server, as well as a copy of the [radiusd] server program itself.
Chapter 11 System Security
11-1