ZyXEL Communications 128MH user manual System Security, Using RADIUS Authentication, Chapter

Prestige 128MH PSTN Router/Hub

Chapter 11

System Security

Your Prestige incorporates a number of security measures to prevent unauthorized access to your network. For example, your Prestige supports both PAP (Password Authentication Protocol) and CHAP (Challenge Handshake Authentication Protocol) in authenticating a Remote Node.

By default, your Prestige can store information about up to eight different users. If more dial-up users are necessary, an external RADIUS (Remote Authentication Dial In User Service) server can be used to provide centralized user security.

In addition, your Prestige also implements a user password to get into the SMT screen. You will have three attempts to enter the correct system password. If you do not do so, the SMT will kick you out. In addition, your Prestige will only support one user in the SMT at one time.

11.1Using RADIUS Authentication

Your Prestige router has a built-in dial-up user list, which can hold up to eight users.

For multiple (>8) dial-in users, your Prestige supports an external authentication server (UNIX or NT server station) which may provide password storage and usage accounting for thousands of users.

11.1.1 Installing a RADIUS Server

To use RADIUS authentication, you will need to have a UNIX- or NT-based machine on your network to act as a [radiusd] server, as well as a copy of the [radiusd] server program itself.

Chapter 11 System Security 11-1