User`s guide

Table Of Contents
Setting Up Pipeline Security
Connection security
Pipeline User’s Guide Preliminary January 30, 1998 7-13
When the Pipeline receives a PPP call, it tries to match the caller’s name and
password to a Connection profile. If the Pipeline doesn’t find a matching profile,
it ends the call. If the Pipeline finds a matching profile, it authenticates the call
and establishes the connection.
When an IP routing connection is being authenticated, the IP address is verified
as part of the PPP negotiation before a call is established.
The Ethernet > Answer > PPP options > Route IP parameter must be set to Yes.
If the caller’s PPP software presents an IP address, the Pipeline must find a
Connection profile that matches that address using Ethernet > Connections > any
profile > IP options > LAN Adrs parameter, which must contain a matching IP
address. Otherwise, it ends the call without completing PAP or CHAP
authentication. If it finds a profile, it authenticates the connection, and then
establishes the connection.
Calling-line ID authentication
Calling-line ID (CLID) requires the phone number of the calling device. CLID
authentication ensures that the incoming call originates from a known phone
number. Id Auth in Ethernet > Answer must be set to Yes, and you must set a
value in the Calling # parameter of the matching Connection profile.
When CLID authentication is required, if the calling number is not recognized,
the Pipeline hangs up. CLID authentication occurs first, before any name or
password comparison.
Note:
In some installations, the WAN provider might not be able to deliver
CLID information, or individual callers might choose to block Caller ID. In
addition, CLID is not available without end-to-end ISDN service on the call and
Automatic Number Identification (ANI) from your WAN provider. Ask your
WAN provider whether the calling-party number is conveyed by the network to
the receiving party. In some cases, the network does not deliver the calling-party
number, such as when the Pipeline is behind one or more PBXs.