Additional Features
Authentication Protocol
076R200-000
SpectraComm IP T1 Router Card
5-5
Issue 13
Installation and Operation Manual
Fallback Option
SCIP’s authentication strategy uses , if so configured, but the device will revert to local
authentication (default) if the server is unreachable or not responding due to network
outage, server down, etc. In such situations, authentication falls back to SCIP’s local list of 20
usernames and passwords. For users who insist on using only , SCIP provides a fallback
option which blocks local authentication. The fallback option command is as follows:
configure fallback enable
[or
disable
]
Note
IMPORTANT! Disable the Fallback option with caution. If authentication is being used with
fallback disabled option and the server becomes unreachable, you will be locked out of all
authentication until the server is reachable again. Therefore, disable this option with caution.
If you have disabled the fallback option and the does not respond, remains unreachable
or there is a configuration error (key, IP address, etc.), you will have to default all configuration to
factory defaults as described below.
1. From the console (craft) port, power cycle the unit by typing:
reboot
2. During power cycle and while the unzip dots are being displayed on the screen, type:
menu
3. After the unzip completes, a three line menu appears. Command the SCIP to load factory
defaults by typing:
L
4. Use the default passwords to reconfigure the SCIP from scratch.
Note
Disabling of the fallback option is only supported in SCIP devices at Firmware Version 2.6.0 and higher.
Special Considerations
•
In order to change local authentication configuration values or enable and configure
authentication, ADMIN access is required.
•
In the event of an incorrectly configured key, or missing ADMIN or SUPERVISOR entries at
the server, a lockout condition may occur, preventing any access to the SCIP
device. To restore control, wait for the SCIP to timeout its attempts to reach a server; this will
force SCIP to revert to local authentication. Repeat the Configuration procedure
using the corrected values.
•
Up to five servers may be specified:
•
In applications with a single server, if the server does not respond, the
SCIP will revert to local authentication.
•
In applications with redundant servers, the SCIP device will look for the first
responding server, starting with the first configured IP, then the second
configure IP, and so on. When a server responds, the default key will be used if the per-
server key is not specified.
•
An authentication timeout will occur when the server is unreachable, when the
service is not responding, or if the server IP address is incorrect. The
default timeout value will be used if the per-server timeout is not specified.
•
When using authentication, the prompts for username/password will be capitalized:
Username
,
Password
. When using local authentication, the prompts for username/
password will not be capitalized:
username
,
password
.
•
The
configure testing
commands work for both local authentication and
authentication.
Содержание SpectraComm IP T1
Страница 119: ......
Страница 120: ...The Best Connections in the Business...
