User Manual

Security Examples
11-29
◆ There is one SLIP user that will use site SlipMan. This site has password exception; once the
password is entered, the site must automatically enter SLIP mode.
Port 2 must be configured to automatically detect PPP so that it can begin running PPP and CHAP when
necessary. The port must not be dedicated to PPP, however, because other connections will be using the
same port.
In order to authenticate the SLIP user, SLIPdetect must be disabled. Figure 11-56 displays the commands
necessary for this configuration:
Figure 11-56: Authentication for Multiple Users
11.8.4 Outgoing LAN to LAN Connection
An SCS in Dallas must connect to an SCS in Seattle. The Dallas SCS must be configured in the following
manner:
◆ The SCS in Dallas must have a site for the connection to the Seattle SCS. The site’s name is seattle.
◆ PPP will be used for the connection.
◆ PAP authentication will be used.
◆ To authenticate itself, the SCS in Dallas must send username dallas and password texas.
The following commands must be entered on the Dallas SCS:
Figure 11-57: Configuring Remote Site Authentication
11.8.5 Creating a Firewall
If your site involves an internet connection, it is a good idea to set up a firewall to augment current security.
A firewall prevents outside users from freely accessing your network by controlling which services on your
network are available to internet users.
A local network consists of addresses 192.0.1.0 through 192.0.1.24. Site irvine is used to manage
connections to this network. Irvine requires a firewall that does the following:
Local>> DEFINE AUTHENTICATION TFTP PRECEDENCE 1
Local>> DEFINE AUTHENTICATION TFTP PRIMARY 192.0.1.88
Local>> DEFINE PORT 2 AUTHENTICATE ENABLED
Local>> DEFINE SITE PPPusers LOCAL “special”
Local>> DEFINE PORT 2 PPPDETECT ENABLED
Local>> DEFINE PORT 2 SLIPDETECT DISABLED
Local>> DEFINE SITE “SlipMan” IP REMOTEADDRESS 192.0.1.17
Local>> DEFINE SITE “SlipMan” LOCAL “exception”
Local>> DEFINE SITE “SlipMan” PROTOCOL SLIP
Local>> DEFINE SITE seattle AUTHENTICATION PAP ENABLED
Local>> DEFINE SITE seattle AUTHENTICATION USERNAME dallas
Local>> DEFINE SITE seattle AUTHENTICATION REMOTE “texas”