Chapter 29: Security
STANDARD Revision 1.0
C4® CMTS Release 8.3 User Guide
© 2016 ARRIS Enterprises LLC. All Rights Reserved.
843
(“echo” or “no echo”), the C4/c CMTS either displays the user’s response to the challenge on the terminal line or it does
not display it.
The Access-Request reply to an Access-Challenge packet includes the same mandatory attributes as specified in Attributes
in the Access-Request Packet section above. The user challenge response that was entered at the terminal line is included
as a User-Password attribute. Additionally, a State attribute is included unchanged, just as it was received in the
corresponding Access-Challenge.
AAA Method and Group Notes
The Access-Challenge support does not change the operation of AAA groups on the C4/c CMTS. Currently when there are
multiple RADIUS or groups listed within an AAA method, if a rejection is received for an authentication request
for the first group in the list, the C4/c CMTS attempts to authenticate against the next group in the method list. This same
behavior occurs when a rejection is received as a result of a RADIUS challenge response.
Operational Information and Caveats
Users of RADIUS should be aware of the following:
The C4/c CMTS supports only Authentication. Authorization and Accounting are not supported by the C4/c CMTS even
if the RADIUS server does support them.
This implementation of RADIUS supports only IPv4 Internet addresses. All RADIUS servers configured on the C4/c
CMTS must have IPv4 addresses.
The Request Authenticator field generated by the C4/c CMTS in each Access-Request packet is cryptographically
secure. It has a lifetime in excess of one year.
Description
The Terminal Access Controller Access Control System Plus ( ) is a TCP-based protocol supporting distinct
request/response transactions for authentication, authorization, and accounting. supports full payload
encryption via Message Digest version 5 (MD5) and offers authentication for a wide variety of user services including login,
