ZyXEL Communications Prestige 128IMH, User Manual, Page: 105 / 142

Prestige 128IMH User’s Guide ZyXEL
¿ ù » ~
!
© |¥ ¼ © w ¸ q¼ Ë ¦ ¡ ¡ C
Page 14-1
14. System Security
14.1. About System Security For the Prestige
The Prestige incorporates a number of security measures to prevent unauthorized access to
your network. For example, the Prestige supports both PAP (Password Authentication
Protocol) and CHAP (Challenge Handshake Authentication Protocol) in authenticating a
remote node. More information on CHAP and PAP can be found in Chapter 1. In addition,
the Prestige also implements a user password to get into the SMT screen. You have three
attempts to enter the correct system password. If you do not do so, the SMT will kick you
out. In addition, the Prestige only supports one user in the SMT at one time.
14.2. Using RADIUS Authentication
In addition to the Prestige’s built-in dial-up user list, which can hold up to eight users, it
also supports an external authentication server which may provide password storage and
usage accounting for thousands of users.
14.2.1. Installing a RADIUS Server
To use RADIUS authentication, you need to have a machine on your network to act as
a server, as well as a copy of the
radiusd
server program itself. You can obtain a
copy of the RADIUS software, along with documentation for the server, at
http://www.livingston.com/Tech/FTP/pub-le-radius.shtml
or at
ftp://ftp.livingston.com/pub/le/radius/
Follow the included instructions to install the server on your server.
Once you have installed the server, you need to edit the
dictionary
file in the
RADIUS configuration directory (which is usually
/etc/raddb
). Using a text editor,
add the following lines to the
dictionary
file: