Chapter 1: Introduction

Printing File sharing Host access Database E-mail

Scheduling

Remote Access Server (Windows NT Server)

Up to 46 simultaneous clients (60 for Europe)

ISDN

Remote Client

Internet Service

Provider

Figure 1-2. RAS FeaturesSecurID Support Overview

Security for connections to RAS Server is usually provided using the PPP authentication protocols (PAP, CHAP, or MS- CHAP) processed by Microsoft RAS. To grant access to the server, remote clients must supply static identity and password. Since these parameters can easily be guessed or hacked, Security Dynamics proposes a stronger security system based on a Personal Identification Number (PIN) in combination with a randomly generated passcode. The passcode is received from a SecurID token (credit-card sized electronic device), but changes every 60 seconds. Therefore, authentication parameters for a connection are not available for a later connection.

5536 PRI RAS Communications Controller Users Guide

9