Watchguard Firebox X5500E, Справочное руководство

Страница: 59 / 160

User Guide 51
Packet Filter Policies
RADIUS-Accounting and RADIUS-Acct-RFC
The Remote Authentication Dial-In User Service (RADIUS) Accounting policy supplies accounting
information to administrators of networks that use RADIUS authentication. RADIUS is a client-server
system that keeps authentication information for users, remote access servers, and VPN gateways in a
central user database that is available to all servers. The RADIUS server is also notified when the
authenticated session starts and stops. This information can be helpful for accounting.
In RFC 2866, the server port used by RADIUS changed from port 1646 to 1813. Make sure you select the
policy that matches your implementation.
Characteristics
• Internet Protocol(s): UDP
• RADIUS-Accounting policy Port Number(s): UDP1646
• RADIUS-ACCT-RFC policy Port Number(s): UDP 1813
RDP
The Microsoft Remote Desktop Protocol (RDP) supplies remote display and input abilities over network
connections for Windows software applications that operate on a server.
Characteristics
• Internet Protocol(s): TCP
• Port Number(s): 3389
RIP
Routing Information Protocol (RIP) is a link state routing protocol developed in the early years of
routing. Its limitations make it inappropriate for use in the Internet, but it can be useful in small
networks. We recommend that you use this service only if you have enabled and configured RIP in the
dynamic routing processes in the Fireware configuration.
Characteristics
• Internet Protocol(s): UDP
• Port Number(s): 520
RSH
Remote Shell (RSH) is used access the command line of a remote host computer. Because it is not
encrypted, we do not recommend you allow any RSH connections to computers protected by the
Firebox without the use of a VPN.
Characteristics
•
Internet Protocol(s): TCP
• Port Number(s): 514