Tut Systems SMS2000 manual Authentication

Authentication

Chapter 5 - Authentication

Authentication is the process of verifying the identity of a subscriber.

Authentication

The SMS2000 is capable of performing authentication by using an external server (OCS or RADIUS). For more information on using the OCS for authentication, see the OCS User’s Guide. For more information on RADIUS, see Chapter 13, “Using SMS2000 with a RADIUS Server.” Scenarios for performing these functions in various configurations are described below.

Note: The SMS2000 can authorize machines based on source MAC address (sometimes called “machine authentication”, VLAN ID, SNMP information, IP address, or any combination of these using groups and rules.

Table 5-1 shows how authentication is performed with no external server, with RADIUS, and with the OCS.

Table 5-1 Authentication

Server	Functionality
With No External Server	The SMS2000 has no database capable of
	authentication, however it can be used to
	authorize machines based on source MAC
	address (sometimes called “machine
	authentication”), VLAN ID, SNMP information,
	IP address, or any combination of these using
	groups and rules. For more information on using
	groups and rules, see Chapter 10, “Groups and
	Rules.”
With RADIUS	The SMS2000 behaves like a standard network
	access server (that is, a dial-in network server)
	and supports RADIUS authentication.
	The client enters a user name and password on a
	Web page generated locally by the SMS2000.
With OCS	The OCS can be configured to authenticate
	clients. The OCS can also be configured to allow
	some subscribers (such as servers) network
	access without authentication.

TUT Systems, Inc Page 45 of 104 P/N 220-06288-20