Radius Configuration - Multitech MultiConnect rCell 100 User Manual

DoS Prevention
This area of the Access Configuration window engages a set of rules at the firewall that prevents Denial-of-Service
attacks by limiting the amount of new connection requests to the device.
Field
Enabled
Per Minute
Burst
Ping Limit
This area of the Access Configuration window engages a set of rules at the firewall that aims to prevent ping flood
attacks by limiting the number of ICMP requests to the device. These rules that mitigate the effects of a ping DoS
on your device do not apply if ICMP is disabled.
Field
Enabled
Per Second
Burst
Brute Force Protection
This feature tracks login attempts at the RESTFUL API level. Its purpose is to prevent Dictionary attacks that
attempt to brute force the user's password.
Field
Enabled
Attempts
Lockout Minutes

RADIUS Configuration

The RADIUS protocol supports authentication, user session accounting, and authorization of users to the device.
This authentication, accounting, and authorization is independent of the local users created on the device. The
user can enable Authentication, Accounting, or both options.
®
MultiConnect rCell 100 MTR-EV3 User Guide
Description
Enables DoS prevention.
Allowed number of new connections per minute until
burst points are consumed. For example, if 60 new
connections are received in a minute, decrement one
burst point. If no more burst points, drop the packet.
Number of allowed burst for traffic spikes. A burst
occurs when the Per Minute limit is reached. On a
period where the Per Minute limit is not reached, one
burst point is regained, up to the maximum.
Description
Enables the Ping Limit feature.
Allowed number of pings per second before burst
points are consumed. Once burst points run out, ICMP
packets will be dropped.
Number of burst points. On a period where the Per
Second limit is not reached, one burst point is regained,
up to this maximum.
Description
Enables the Brute Force Prevention feature.
The number of failed attempts allowed before the
user's account is locked out.
The number of minutes an account is locked out before
a new login attempt will be accepted.
DEVICE ADMINISTRATION
81