Chapter 1 VPN Router administration 29

Dynamic password

Two types of administrative users exist on the VPN Router:

one super-user (Administrator)

as many administrative users as needed

There is dynamic password support for administrative users only. The

Administrator still requires a static password.

RADIUS manages the dynamic password. The external RADIUS service acts as an intermediary between the VPN Router and the dynamic password authentication system.

To configure a dynamic password:

1Select Profiles > Users and click Add User.

2Under Administration Privileges, select Dynamic Authentication.

When enabled, this forces administrative users to authenticate through RADIUS, which then forwards authentication credentials to a dynamic password authentication system, such as SecurID. The privileges associated with this administrative user are configured as before.

Tools

The VPN Router supports standard IP tools such as ping, Traceroute, and ARP show and delete. You access these tools through the Admin > Tools window.

The ping command generates an ICMP echo-request message, which any host can send to test node reachability across a network. The ICMP echo-reply message indicates that the node is successfully reached.

Nortel VPN Router Troubleshooting

Page 29
Image 29
Nortel Networks NN46110-602 manual Dynamic password, Tools