Fields in the Global RADIUS Options menu.
Field
Description
Authentication for PPP
Dialin
By default, the following authentication sequence is used for in-
coming calls with RADIUS: First CLID, then PPP and then PPP
with RADIUS.
Options:
•
: Only inband RADIUS requests (PAP,CHAP, MS-
CHAP V1 & V2) (i.e. PPP requests without CLID) are sent to
the RADIUS server defined in Server IP Address.
•
:3 2/.
: Only outband RADIUS requests (i.e. re-
quests for calling line identification = CLID) are sent to the
RADIUS server.
is enabled by default.
10.6 Certificates
An asymmetric cryptosystem is used to encrypt data to be transported in a network, to gen-
erate or check digital signatures and the authenticate users. A key pair consisting of a pub-
lic key and a private key is used to encrypt and decrypt the data.
For encryption the sender requires the public key of the recipient. The recipient decrypts
the data using his private key. To ensure that the public key is the real key of the recipient
and is not a forgery, a so-called digital certificate is required.
This confirms the authenticity and the owner of a public key. It is similar to an official pass-
port in that it confirms that the holder of the passport has certain characteristics, such as
gender and age, and that the signature on the passport is authentic. As there is more than
one certificate issuer, e.g. the passport office for a passport, and as such certificates can
be issued by several different issuers and in varying qualities, the trustworthiness of the is-
suer is extremely important. The quality of a certificate is regulated by the German Signa-
ture Act or respective EU Directives.
Certification authorities that issue so-called qualified certificates are organised in a hier-
archy with the Federal Network Agency as the higher certifying authority. The structure and
content of a certificate are stipulated by the standard used. X.509 is the most important and
the most commonly use standard for digital certificates. Qualified certificates are personal
and extremely trustworthy.
Digital certificates are part of a so-called Public Key Infrastructure (PKI). PKI refers to a
system that can issue, distribute and check digital certificates.
10 System Management
Teldat GmbH
106
bintec Rxxx2/RTxxx2
