Black Box LRA005A-R2 - Manual (Page 13)

ASYNC ROUTER AR-P, AR-5, AND SYNC ROUTER USER’S MANUAL
13
2.2.4 P REVENTS U NAUTHORIZED N ETWORK A CCESS
The Router offers comprehensive security mechanisms to prevent unauthorized network access. The
Router security operates at several levels:
• PPP link-level security (over the WAN link)
• IP, IPX, and SPX packet filtering
• passwords for ftp and telnet servers (IP)
• console login and password
• passwords for RouterVu logins (IPX)
• security callback to remote users (clients)
• client logins and passwords
2.2.5 I NTEROPERABLE WITH RADIUS AND S ECUR ID S ERVERS
The Router interoperates with RADIUS and SecurID authentication servers. RADIUS allows
administrators to centrally store and manage names and passwords for IP sites with many dial-in routers
and remote clients. SecurID requires remote clients to physically possess a SecurID metal card, in order
to gain network access.
NOTE
SecurID and RADIUS technologies cannot be used at the same time on a Router.
2.2.6 PPP L INK -L EVEL S ECURITY
For PPP link-level security, the Router supports the Challenge Handshake Authentication Protocol
(CHAP) and the Password Authentication Protocol (PAP). Both PAP and CHAP require password
and node names for linking to prevent unauthorized users from gaining access through the Router.
We strongly recommend using CHAP to provide security.
Along with PAP and CHAP, a new security CHAP (SCHAP) for Router clients supports security
callback. A modem configured for client access attempts to negotiate CHAP, PAP, then SCHAP
authentication.
2.2.7 IP AND IPX P ACKET F ILTERING
The Router’s extensive IP and IPX filtering allows specific hosts, networks, and services—mail, terminal,
print, and file services—to be excluded from, or allowed access to, your network.
2.2.8 P REDEFINED IP P ACKET F ILTERS
If you will be using the Router to provide Internet access to your users, you have the option of installing
a list of IP filters that are commonly used to protect networks from unauthorized access by Internet
users. Refer to Appendix B.
2.2.9 P REDEFINED IPX P ACKET F ILTERS
You also have the option of installing a list of IPX filters that are commonly used to suppress dialing
caused by unnecessary network traffic such as:
• Pings from NetWare servers
• SPX idle traffic
• NetBIOS name broadcasts between servers