User`s guide

SFVRA Connection Manager 67
C ONFIGURING U SERS
Access
interception. Instead, a calculation is done on the packets transmitted between the two devices, and
the results are compared to the shared CHAP Secret for validation. If the calculation’s results do
not match the expected results, the connection is terminated.
E
THERNET ADDRESS
This address is used for authentication purposes on connections made over the Combinet
Proprietary Protocol (CCP). It is required if CPP is enabled as the authentication method. This is
the MAC address of the remote bridge device. This value is passed to the system (in band) when a
connection is established. The system will look up the incoming Bridge Ethernet Address in the
User List. If the address is not included on the User List, the system will reject the incoming call. If
the address is included on the User List, and the corresponding user entry is not configured with a
password, the connection will be established. If the address is included on the User List, and the
corresponding user entry is configured with a password, the system will validate the password
before establishing the connection.
C
ALLING LINE ID SECURITY
Validates the Calling Line information received when an ISDN connection is made. The system will
compare the incoming Calling Line ID with the value configured (if any) in the User List. If the
numbers are identical the connection will be established. Otherwise, the system will reject the
incoming call.
When the Calling Line ID security is enabled, entering a Calling Line ID for each remote user is
optional. When two remote devices share the same line (a single point-multipoint ISDN line), they
can also configure the same Calling Line IDs if they both also have some other type of
authentication configured (for example, PAP, CHAP, NT Authentication, or CPP Authentication).
The following table illustrates the dependencies between other authentication methods and the
Calling Line ID authentication:
Note: If a system is brought on line with a user that has a required Calling Line ID that is a
duplicate of another user’s Calling Line ID, and no other type of authentication is used, a
warning message is logged at initialization. Every attempt to connect the user thereafter
will result in an error message being logged and the call being rejected.
PAP
Authentication
CHAP
Authentication
NT
Authentication
CPP
Authentication
Calling Line ID
Authentication
Yes No No No Optional.
Duplicates allowed
for these Users.
No Yes No No Optional
Duplicates allowed
for these Users.
No No Yes No Optional
Duplicates allowed
for these Users.
No No No Yes Optional
Duplicates allowed
for these Users.
No No No No Required
Duplicates not
allowed.