Cabletron Systems CSX1200, CSX1000 Network Login General Configuration Background Information

CONFIGURING NETWORK LOGIN INFORMATION

Network Login General Configuration

Concerning item (9), Authentication Timeout, note the following recommendation: If using the Security Dynamics Ace Server, modify the timeout value to be greater than the change frequency value of the SecurID cards. Refer to the Security Dynamics documentation for more information on this change frequency value. In addition, if you are using a VRA Manager for call control management, this timeout value must represent the amount of time for the authenticating agent to respond to the login attempt, and for VRA Manger to respond as well. These times should be based on network configuration.

USING MANAGE MODE

netlogin

Displays the current network login configuration data. After entering the netlogin command, you will be prompted for the type of login configuration information you want. The prompt will resemble the CFGEDIT screen in which this information was originally configured. You may display: user level security general configuration, login banners, login configuration specific to RADIUS, and login configuration specific to TACACS.

netlogin change

Allows you to change the current network login configuration data. After entering the netlogin change command, you will be prompted for the type of login configuration information you want to change. The prompt will resemble the CFGEDIT screen in which this information was originally configured. You may change: user level security general configuration, login banners, login configuration specific to RADIUS, and login configuration specific to TACACS.

NETWORK LOGIN GENERAL CONFIGURATION BACKGROUND INFORMATION

Allows you to change the network login prompts. These include the prompts for:

•login ID

•dynamic password

•user password

•old password, new password

•passcode

You may also specify the number of login attempts, password change attempts and the amount of time in seconds before an authentication timeout.

When using DHCP to provide temporary IP addresses to remote clients, it is important to enable BOOTP before Authentication if user authentication is used.

Workgroup Remote Access Switch 189