Prestige 153/153X WAN Bridge/Routers
11-1
Chapter 11
System Security
Chapter 11
System Security
Your Prestige incorporates a number of security measures to prevent unauthorized access to your
network. For example, your Prestige supports both PAP (Password Authentication Protocol) and
CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote Node.
By default, your Prestige can store information about up to eight different users. If more dial-up
users are necessary, an external RADIUS (Remote Authentication Dial In User Service) server
can be used to provide centralized user security.
In addition, your Prestige also implements a user password to get into the SMT screen. You will
have three attempts to enter the correct system password. If you do not do so, the SMT will kick
you out. In addition, your Prestige will only support one user in the SMT at one time.
11.1 Using RADIUS Authentication
Your Prestige router has a built-in dial-up user list, which can hold up to eight users.
For multiple (>8) dial-in users, your Prestige supports an external authentication server (UNIX or
NT server station) which may provide password storage and usage accounting for thousands of
users.
11.1.1 Installing a RADIUS Server
To use RADIUS authentication, you will need to have a UNIX- or NT-based machine on your
network to act as a [
radiusd
] server, as well as a copy of the [
radiusd
] server program itself.
