Enterasys Networks CSX7000, CSX5500, CSX6000 manual Chap Secret

USER’S GUIDE

X.121 ADDRESS

If you choose an SVC for your virtual circuit, you must provide the X.121 address of the remote device you are currently adding to the Device Table. (The X.121 addresses for both local and remote devices are provided by your X.25 provider.)

DIGITAL MODEM CONFIGURATION ELEMENTS

Note: These elements are configured for digital modem devices only.

LINE PROTOCOL

The available line protocols for ISDN access devices. The only available selection at this time is PPP.

BAUD RATE

The baud rate at which data will be transmitted. The only selection at this time is Auto, which implies the CyberSWITCH and remote modem will negotiate the baud rate automatically.

BEARER CAPABILITIES

The information transfer capabilities that are used for digitized analog modem signals. Choices are: Speech or 3.1 kHz Audio. The default value is Speech.

DIAL OUT PHONE NUMBER

The phone number the CyberSWITCH will use to call out to this device.

AUTHENTICATION CONFIGURATION ELEMENTS

PAP PASSWORD

This password is used by PPP line protocol for PAP authentication. This is an unencrypted password value (a string of 1 to 12 ASCII characters) used as a security check when PAP Password Security is enabled. (PAP is an authentication protocol defined in RFC 1334 as part of the PPP protocol suite.) At connection establishment time, the calling party sends an unencrypted device identifier and password combination over the WAN to the system. The system looks up the Device Name based on the received device identifier and validates the password for that device. If the password received matches the password configured for the identified device, the call is accepted. Otherwise, the call is disconnected.

This value is stored in the same location as the bridge password, so a change to one password affects the other.

CHAP SECRET

This field is used by PPP line protocol for CHAP authentication. This is a string of 1 to 17 ASCII characters that is used as a security check when CHAP Challenge Security is enabled. (CHAP is an authentication protocol defined in RFC 1334 as part of the PPP protocol suite.) CHAP is characterized by a highly secure challenge and response mechanism which is performed at connection setup, and which can optionally be repeated throughout the existence of the connection. A shared CHAP Secret is configured for the devices at both ends of the connection. Refer to System Information, system secret. As opposed to a password, a CHAP Secret is not sent across the link, and therefore is not susceptible to interception. Instead, a calculation is done on the packets transmitted between the two devices, and the results are compared to the shared CHAP Secret for validation. If the calculation’s results do not match the expected results, the connection is terminated.

194 CyberSWITCH