SnapGear VPN Router User Manual page 37

Field
Enable Dial-in
IP Addresses for Dial
In users
Authentication
Scheme
Idle Timeout
Dial-in server configuration
Description
To enable and configure dial-in, check the relevant COM
port box. The selected port is now available for dial-in
access. Otherwise, any attempt to dial in will be blocked.
The current dial-in status of all the COM ports is
displayed. If dial-in is already enabled, the check box will
display a bold or shaded check mark. If not enabled, it
will be clear.
Note: A port that has been enabled for dial-in cannot be
used simultaneously for dial-out activities, such as dial-
on-demand Internet connection. If a port was previously
set up for Internet access and is subsequently enabled for
dial-in, the Internet access function will be disabled.
To allow dial-in users access to the local network, they
must be assigned local IP addresses. Specify a free IP
address from your local network each dial-up client will
use when connecting to the SnapGear VPN Router.
The authentication scheme you choose is the method by
which the SnapGear VPN Router will challenge users
dialing into the network. Dial-in clients must be
configured to use the selected authentication scheme.
Select the desired option:
MSCHAPv2 is the most secure.
CHAP is less secure, and similarly PAP is even less
secure, but more common. If you choose None, no
Username/Password authentication is performed on dial-
in.
RADIUS and TACACS+ make use of a remote
authentication server on the local network. When
selected, you must enter the IP address of a server setup
to use this scheme.
If a dial-in connection remains inactive, it can be
automatically disconnected after a specified time period.
Selecting Enable idle timeout will disconnect idle
connections after 5 minutes. You can set this Idle time to
be anywhere in the range of 0 – 99 minutes.
33