Chapter 4: Software
Multi-Tech Systems, Inc. MultiAccess ACS User Guide
25
Authentication Screen
If the authentication method is Radius, then the IP address of the Radius server and Radius Accounting
Server have to be entered and the user credentials are handled by the Radius server.
If the authentication method is local, the Local User Database defines the user credentials.
For RAS calls, dial-in PPP, a second static IP address is needed in the Remote Host Address field. This
address is for the dial-in user, PPP peer. This address needs to be on the same subnet, network number,
as that of the MultiAccess.
Authentication Screen Field Definitions
Field Name Values
Description
Authentication Setup Fields
Authentication
Type
local or
radius
Local Authentication refers to the Local User database on the MultiAccess.
Radius is a network specific protocol used to communicate authentication
requests between the authentication server and Radius client. User
credentials are stored within the Radius server. The MultiAccess is a Radius
client.
Remote Host
Address
n.n.n.n
This is the IP address the MultiAccess will assign to the remote node, PPP
client, if one is not dictated by the Radius server which is included in the
authentication accept packet issued by the Radius server. This address
should be on the same network number as that of the MultiAccess.
Radius Client Setup Fields
RADIUS Server
Address 1
n.n.n.n
IP address of the Radius Server providing remote user verification.
Port
numeric
The UDP port number (ususally 1812) is used to communicate with the
Radius Server. The Radius server has to listen on the same set of UDP ports
that the Radius client, MultiAccess is using.
RADIUS
Accounting
Address 1
n.n.n.n
IP address of the Radius Accounting host. Radius accounting is a process
that starts after successful Radius authentication. The MultiAccess sends an
accounting start packet to the accounting server. When the user disconnects,
the MultiAccess sends an accounting stop packet to the accounting server.
Radius accounting summaries the time and date, duration, POTS port
connected and IP address given to the user for that call. Radius accounting
does not track the amount or type of data or places the user has been.
Port Numeric
The UDP port number (usually 1813) is used to communicate with the Radius
Accounting host. The host has to listen on the same set of UDP ports that the
Radius client, MultiAccess, is using.
Secret Alpha-
numeric
The secret is used by the Radius Server to encrypt and by the Radius Client
to unencrypt user passwords during exchanges of Radius authentication
packets. The client secret has to be identical to the one used by the Radius
server. MultiAccess implements MD5 encryption.