CHAPTER 4: Configuration
65
4.6 Integrating the Concentrator Into Your Network
There are special configuration considerations you need to keep in mind if you want to integrate the Remote
Access Concentrator into a network containing routers.
First, you should disable outbound authentication on routers that connect to a Concentrator. This is because
leaving outbound authentication enabled on routers that connect to the Concentrator creates a security gap.
Someone could “assume the identity” of the Concentrator by using information captured during outbound
authentication. (This is not a concern with PCs and other types of devices that use Windows Dialup to
connect to the Concentrator, because—unlike routers—they don’t request the Concentrator’s
authentication information for outbound communication.)
For instructions on, and illustrated examples of, specific applications:
• Refer to
Section 4.6.1
for instructions on using static routes for connecting to subnets reachable through
WAN devices.
• Refer to
Section 4.6.2
for instructions on integrating the Concentrator into a standard IP network.
• Refer to
Section 4.6.3
for instructions on integrating the Concentrator into an IP network in which the
Concentrator is the gateway to the Internet.
• Refer to
Section 4.6.4
for instructions on integrating the Concentrator into an IP network with multiple
LAN subnets.
