Bay Networks 3395A, Руководство по настройке

Страница: 89 / 146

Using ARAP with Authentication and Dial-back Features
893-826-A 6-5
Using ARAP with Authentication and Dial-back Features
Model 3395A servers offer several security features that control access to
terminal server ports and access to devices on the network. You can use these
features individually or combine them to achieve different levels of network
security. (The Model 3395/3395A Software Management Guide describes these
security features and some of the issues you may want to consider before you
implement them at your site.) This section summarizes the operation of Model
3395A server security features at ports that are configured for AppleTalk
Remote Access connections.
The authentication steps that are performed are somewhat complex. The actual
steps that the communication server performs in any given situation depend on
the manner in which the remote user attempts to log on (as a “guest” or a
“registered” user) and on the settings for a number of DEFINE/SET PORT and
SERVER characteristics that affect the behavior of the Model 3395A server.
These characteristics include:
DEFINE/SET PORT ARAP GUEST LOGINS
DEFINE/SET PORT CCL NAME
DEFINE/SET PORT DIALBACK
DEFINE/SET PORT KERBEROS
DEFINE/SET PORT SECURID
DEFINE PORT USERNAME
DEFINE/SET SERVER ARAP PASSWORD
You should note that methods of controlling access to LAT or TCP/IP resources
on the network do not apply at ports that are configured for AppleTalk Remote
Access connections. These ports include:
• LAT authorized groups.
• Limited view (LAT).
• Service passwords (LAT).
• Internet security.
NOTE:
If you are using ARAP with Kerberos or SecurID authentication or
with dial-back scripts, the AppleTalk “registered” user name must be the same
as the Kerberos and/or SecurID user name, and/or the name of the dial-back
script.