User Manual

Security Outgoing Authentication
11-5
11.2.1 Outgoing Character Mode Connections
If the remote device is expecting the information in character mode, the username and password must be
sent in a chat script. The chat script should expect the username prompt, send the appropriate username,
expect the password prompt, and send the appropriate password. See Chapter 5, Additional Remote
Networking,for information on configuring chat scripts.
11.2.2 Outgoing PPP Connections
If the remote device supports PPP, the username and password may be transmitted using CHAP (Challenge
Handshake Authentication Protocol) or PAP (Password Authentication Protocol). Each protocol goes
through a negotiation sequence to complete the authentication; see Configuring Outgoing Connections on
page 4-16 for details.
To enable CHAP and PAP authentication on outgoing connections, use the Define Site Authentication
CHAP and Define Site Authentication PAP commands. One or both may be enabled, however, CHAP is
recommended.
Figure 11-12: Enabling PAP/CHAP Outgoing Authentication
If both CHAP and PAP are configured for authentication, CHAP authentication will be attempted first. If
the remote host does not understand CHAP, PAP will be attempted instead. If both PAP and CHAP fail, the
connection will be terminated.
To define the username that the SCS sends to the remote host, use the Define Site Authentication
Username command:
Figure 11-13: Outgoing Site Username
The password sent to the remote host is called the remote password. Configure this password with the
Define Site Authentication Remote command.
Figure 11-14: Configuring Site Remote Password
11.2.3 Outgoing SLIP Connections
All outgoing SLIP authentication must be done with chat scripts before SLIP starts. SLIP does not support
any authentication. To configure chat scripts, see Chat Scripts on page 5-3.
Local>> DEFINE SITE dallas AUTHENTICATION CHAP ENABLED
Local>> DEFINE SITE dallas AUTHENTICATION PAP ENABLED
Local>> DEFINE SITE dallas AUTHENTICATION USER "seattle"
Local>> DEFINE SITE dallas AUTHENTICATION REMOTE "badger"