Avocent Cyclades ACS, Installation/Administration/User Manual

Page: 22 / 212

6 Cyclades ACS Advanced Console Server Installation, Administration and User Guide
VPN
The console server administrator can set up VPN connections to establish an encrypted
communication between the console server and a host on a remote network. The encryption creates
a security tunnel for dedicated communications.
You can use the VPN features on the console server to create a secure connection between the
console server every machine on the subnet at the remote location or between the console server
and a single remote host.
To set up a security gateway, install IPSec on any machine performing networking over IP,
including routers, firewall machines, application servers and end-user machines.
The ESP and AH authentication protocols are supported. RSA Public Keys and Shared Secret
are supported.
For detailed information and procedures to configure a VPN connection, see VPN Connections on
page 91.
Packet Filtering
The administrator can configure the device to filter packets like a firewall. IP filtering is controlled
by chains and rules.
Structure of IP filtering
The Firewall Configuration form in the Web Manager is structured on two levels:
• The view table of the Firewall Configuration form containing a list of chains.
• The chains which contain the rules controlling filtering.
OTP/Local Uses the local password if the OTP password fails.
Radius Authentication is performed using a Radius authentication server.
Radius/Local Radius authentication is tried first, switching to Local if unsuccessful.
RadiusDownLocal Local authentication is performed only when the Radius server is down.
Authentication is performed using a authentication server.
/Local authentication is tried first, switching to Local if unsuccessful.
DownLocal Local authentication is tried only when the server is down.
Table 1.4: Authentication Methods Supported (Continued)
Authentication Type Definition