Figure 85 Domain Authentication Types Screen - Billion BiGuard S10 Administration Manual

Ssl vpn security gateway
Hide thumbs Also See for BiGuard S10:
Table of Contents

Advertisement

Click Create to add a new domain. The Add Domain screen appears.
FIGURE 85
D
OMAIN AUTHENTICATION TYPES SCREEN
Domain Name
Type a name for the domain.
RADIUS - PAP
PAP (Password Authentication Protocol) is an access control protocol for
dialing into a network that provides only basic functionality. Passwords are
sent over the line unencrypted from the client, it provides password check-
ing, but is not secure from eavesdropping.
RADIUS - CHAP
MSCHAP (Microsoft Challenge Handshake Authentication Protocol) is an
access control protocol for dialing into a network that provides a moderate
degree of security. The CHAP server encrypts the challenge with the pass-
word stored in its database for the user and matches its results with the
response from the client. If they match, it indicates the client has the cor-
rect password, but the password itself never leaves the client's machine.
RADIUS -
MSCHAP (Microsoft Challenge Handshake Authentication Protocol) is
MSCHAP
Microsoft's version of CHAP and provides authentication for PPP connec-
tions between a Windows-based computer and an Access Point or other
network access device.
RADIUS -
MSCHAPV2 (Microsoft Challenge Handshake Authentication Protocol) is
MSCHAPV2
Microsoft's second version of CHAP.
NT Domain
Select this item if you the domain is being used on a Windows NT server.
Active Directory
Active Directory is an advanced, LDAP compliant, hierarchical directory
service that comes with Windows 2000 servers. Because it is built on the
Internet's Domain Naming System (DNS), workgroups can be given
domain names, just like Web sites, and any LDAP-compliant client (Win-
dows, Mac, Unix, etc.) can gain access to it. Active Directory can function
in a heterogeneous, enterprise network and encompass other directories
including NDS and NIS+.
LDAP
LDAP (Lightweight Directory Access Protocol) is a directory listing access
protocol. LDAP support is being implemented in Web browsers and e-mail
programs, which can query an LDAP-compliant directory. LDAP is a sibling
protocol to HTTP and FTP and uses the ldap:// prefix in its URL. LDAP is a
simplified version of the DAP protocol, which is used to gain access to
X.500 directories. It is easier to code the query in LDAP than in DAP, but
LDAP is less comprehensive.
Configuring SSL VPN Parameters
69

Advertisement

Table of Contents

Troubleshooting

loading

Table of Contents