Authentication

The auth add web command automatically adds an allow-net to the specified server so that subscribers can be redirected to the allow-net without being intercepted. For more information on allow-nets, see Allow-Nets” on page 49.

To add a Web server as the authentication server for the current group, use this command:

auth add web url secret secret [cmd-serv]

For this example, the SMS2000 will be configured to authenticate using the OCS server at 192.168.254.249. The shared secret donttell will be used for mutual authentication between the SMS2000 and the OCS. The OCS is treated as a command server by periodically sending it requests for commands. Type:

sms2000% auth add web http://192.168.254.249/pp/welcome.php3 secret donttell cmd-serv

Note: This feature can be used to create an allow-net of sites that are accessable without authentication.

Note: A shared secret is similar to a password.

Deleting an Authentication Server

Use the auth delete command to automatically remove an allow-net for the IP address of the Web server with a 32-bit subnet mask. If the same server is used as theWeb server and the cmd-server, auth delete deletes the cmd-server also.

To delete an authentication server from the current group, use this command:

auth delete {radius serverweb url}

For example, to stop authentication using the Web server with the IP address 192.168.254.249, type:

sms2000% auth delete web 192.168.254.249

Note: If no other servers are configured, authentication for the current group is disabled.

Testing Authentication

To test authentication for the current group without using any specific server, use this command:

auth on

For example, to enable authentication for the current group, type:

sms2000% auth on

TUT Systems, Inc

Page 47 of 104

P/N 220-06288-20

Page 47
Image 47
Tut Systems SMS2000 Deleting an Authentication Server, Testing Authentication, Auth add web url secret secret cmd-serv