FCD-IPM Installation and Operation Manual Chapter 5 Setup Menu
Access Control (Security) Menu 5-75
Table 5-26. External Access Security Parameters
Parameters Possible Values Description
Security
Authentication
None
User Access Profile
RADIUS
User Access
Profile+RADIUS
Protects your LAN against unwanted entry by outside users.
Access permitted to all users.
Allow/deny access according to the User Access Profile (see below).
Allow/deny access according to the RADIUS Authenticator.
Access is allowed if the User Access Profile permits it OR if the User
Access Profile does not have an entry for the user but the RADIUS
Authenticator allows it.
Note: If you select RADIUS, configure the RADIUS Access parameters
from the Host Parameters Menu. Refer to RADIUS Authentication and
Billing.
Accepted PPP
Authentication
(only relevant to
Link with PPP
Protocol)
CHAP (Challenge
Handshake
Authentication
Protocol)
PAP (Password
Authentication
Protocol)
PPP supports two types of security systems:
CHAP is a type of authentication in which the authentication agent
(typically a network server) sends the client program a key to be used
to encrypt the username and password. This enables the username and
password to be transmitted in an encrypted form to protect them
against hackers.
PAP is the most basic form of authentication, in which a user's name
and password are transmitted over a network and compared to a table
of name-password pairs. Typically, the passwords stored in the table
are encrypted. The main weakness of PAP is that both the username
and password are transmitted in an unencrypted form.
Accessible
Stations/Nets
Defines parameters which limit public access to the network. Access
can be allowed for all stations/nets, only certain stations/nets, or only
stations/nets which are static. When the access mode is 'limited', use
the access list to define which stations/nets have access.
User Access
Profiles (only
relevant to Link
with PPP
Protocol)
View and modify user access profiles in the access control users list.
The list contains user names, security parameters and dialback options.