Black Box LRA005A-R2, LRS002A-R2, LRA001A-R2 manual Prevents Unauthorized Network Access

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL

2.2.4PREVENTS UNAUTHORIZED NETWORK ACCESS

The Router offers comprehensive security mechanisms to prevent unauthorized network access. The Router security operates at several levels:

•PPP link-level security (over the WAN link)

•IP, IPX, and SPX packet filtering

•passwords for ftp and telnet servers (IP)

•console login and password

•passwords for RouterVu logins (IPX)

•security callback to remote users (clients)

•client logins and passwords

2.2.5INTEROPERABLE WITH RADIUS AND SECURID SERVERS

The Router interoperates with RADIUS and SecurID authentication servers. RADIUS allows administrators to centrally store and manage names and passwords for IP sites with many dial-in routers and remote clients. SecurID requires remote clients to physically possess a SecurID metal card, in order to gain network access.

NOTE

SecurID and RADIUS technologies cannot be used at the same time on a Router.

2.2.6PPP LINK-LEVEL SECURITY

For PPP link-level security, the Router supports the Challenge Handshake Authentication Protocol (CHAP) and the Password Authentication Protocol (PAP). Both PAP and CHAP require password and node names for linking to prevent unauthorized users from gaining access through the Router. We strongly recommend using CHAP to provide security.

Along with PAP and CHAP, a new security CHAP (SCHAP) for Router clients supports security callback. A modem configured for client access attempts to negotiate CHAP, PAP, then SCHAP authentication.

2.2.7IP AND IPX PACKET FILTERING

The Router’s extensive IP and IPX filtering allows specific hosts, networks, and services—mail, terminal, print, and file services—to be excluded from, or allowed access to, your network.

2.2.8PREDEFINED IP PACKET FILTERS

If you will be using the Router to provide Internet access to your users, you have the option of installing a list of IP filters that are commonly used to protect networks from unauthorized access by Internet users. Refer to Appendix B.

2.2.9PREDEFINED IPX PACKET FILTERS

You also have the option of installing a list of IPX filters that are commonly used to suppress dialing caused by unnecessary network traffic such as:

•Pings from NetWare servers

•SPX idle traffic

•NetBIOS name broadcasts between servers

13