Sms-Otp Mechanism; Configuring The System To Drop Certain Icmp Reply Messages - Dell S4048–ON Configuration Manual

Hide thumbs Also See for S4048–ON:

Table of Contents

Hostbased Authentication

Authentication

Challenge Response Auth

SMS-OTP Mechanism

A short message service one time password (SMS-OTP) is a free RADIUS module to implement two factor authentication. There are

multiple 2FA mechanisms that can be deployed with the RADIUS. Mechanisms such as the Google authenticator do not rely on the

Access-Challenge message and the SMS-OTP module rely on the Access-challenge message. The main objective of this feature is to

handle the Access-Challenge messages and sends the Access-Request message with user's response.

This module requires NAS for handling the access challenge from the RADIUS server. NAS sends the input OTP in an Access-Request to

the RADIUS server, and the user authentication succeeds or fails depending upon the Access-Accept or Access-Reject response received

at NAS from the RADIUS server.

Configuring the System to Drop Certain ICMP Reply

You can configure the Dell Networking OS to drop ICMP reply messages. When you configure the drop icmp command, the system

drops the ICMP reply messages from the front end and management interfaces. By default, the Dell Networking OS responds to all the

ICMP messages.

Drop the ICMP or ICMPv6 message type.

drop {icmp | icmp6}

CONFIGURATION mode.

You can configure the Dell Networking OS to suppress the following ICMPv4 and ICMP6 message types:

Table 84. Suppressed ICMP message types

ICMPv4 message types

Echo reply (0)

All sub types of destination unreachable (3)

Source quench (4)

Redirect (5)

Router advertisement (9)

Router solicitation (10)

Time exceeded (11)

IP header bad (12)

Timestamp request (13)

10.16.127.141