|
Anleitung Zusammenfassung
Each profile or item in the Connection List has many configurable parameters giving high flexibility on a per user basis. Up to 15 profiles can be defined in the Connection List. Calls cannot be originated or answered unless a Connection List profile is defined. The Express XL/XLT factory defaults with one profile called DEFAULT. This profile is used for any incoming calls when Configuration/Security/Authentication = None or when the username of the connecting PPP peer is not found in the Connection List. To insert a new profile, press the I key when over the Num column. A new inserted profile will always be set up with the default parameters. To copy parameters from an old profile to this newly inserted profile, use the copy (C) and paste (P) keys. Entire configuration trees can be copied with this method. Figure 3-8 shows the Connection List menu. Figure 3-8 Configuration/Connection List Screen 61200.070L1-1 Express XL/XLT User Manual Chapter 3: Terminal Menu Operation and Structure Connection List/Description Write security: 3; Read security: 4 The description is a text string that identifies the profile. Connection List/Active Write security: 3; Read security: 4 When set to Yes (def), this profile is used for authentication and user association of incoming calls. Setting to No is the same as deleting the item but allows the information of the profile to be saved. To delete an unused profile, use the D key when the cursor is over the number in the Num column. Once deleted, the profile is gone permanently as soon as the Connection List is saved. Items may be deleted when DEL appears below the status bar. Connection List/Authentication The authentication menu contains the required parameters for the authentication of the PPP peer and for being authenticated by the PPP peer. Authentication is applied between the Express XL/XLT and the PPP peer as follows: 1. The Express XL/XLT as the authenticator: • When answering an incoming call: -Express XL/XLT uses PPP method configured in Configuration/Security/PPP. -Authenticatee’s username is looked up in all active Connection List profiles (Rx Username). -If found, the Rx Password is used for authenticating. -If not found, DEFAULT entry’s Rx Password is used if Rx Username is blank. When answering a call, the Express XL/XLT does not know who the PPP peer is until the authentication phase is completed. Two PPP protocols (EAP and CHAP) require the authenticator to transmit a username which the authenticatee uses to cross reference the password to use. Since the PPP peer is unknown before the authentication phase is over, the Express XL/XLT uses the Tx Username in the DEFAULT profile to identify itself. If Tx Username is blank, Configuration/System Info/System Name is used. If that is blank, then the word “ADTRAN” is used. 64 Express XL/XLT User Manual 61200.070L1-1 Chapter 3: Terminal Menu Operation and Structure • When originating an outgoing call: -Express XL/XLT uses PPP method configured in Configuration/Security/PPP. -Authenticatee’s username is compared to profile used to dial. • Authenticating with RADIUS: -When Configuration/Security/Authentication is set to Radius, authentication is performed by the RADIUS server. -The Express XL/XLT uses the DEFAULT Connection List profile for all other parameters not supported by RADIUS attributes. - RADIUS attributes currently supported are: framed ip, framed net- mask, framed ipx network, framed routing, framed compression, and idle timeout. 2. The Express XL/XLT as the authenticatee: • When answering an incoming call: -If the Configuration/Security/Authentication parameter is set to None, the DEFAULT profile’s Tx Username and Tx Password are used by the Express XL/XLT for authenticating itself. - If the Configuration/Security/Authentication parameter is set to Connection List or RADIUS, the Express XL/XLT will wait until the PPP peer is authenticated before authenticating itself (except when CHAP or EAP is used). If CHAP or EAP is used, the username transmitted by the PPP peer’s authentication challenge packet is looked up in the Connection List. If found, the Express XL/XLT responds with the profile’s Tx Username and Tx Password parameters. If not found, the DEFAULT profile’s Tx Username and Tx Password parameters are used. • When originating an outgoing call: - The dial-out profile Tx Username and Tx Password are used regardless of the PPP peer’s username received if CHAP or EAP is used. Authentication/Tx Method Write security: 2; Read security: 3 This parameter specifies how the Express XL/XLT is to be authenticated by the PPP peer. There are four possible selections. See Security/PPP on page 58 for an explanation of the three PPP standard authentication types. None (def) - The connection will not allow the PPP peer to authenticate it. 61200.070L1-1 Express XL/XLT User Manual Chapter 3: Terminal Menu Operation and Structure PAP, CHAP or EAP - The connection can be authenticated using PAP, CHAP or EAP. CHAP or EAP - T...
Dieses Handbuch ist für folgende Modelle:Netzwerk - 1200070L1 (1.23 mb)