User`s guide

Setting Up Pipeline Security
Using security cards
7-18 Preliminary January 30, 1998 Pipeline User’s Guide
MAX (acting as the NAS). The NAS requests authentication from the RADIUS
server, which in turn contacts the external server.
Figure 7-1. RADIUS acting as client of ACE or Safeword server
When a user initiates a login to a secure site, the following events occur:
1
The calling unit (for example, a Pipeline) calls a NAS (the MAX).
2
The NAS requests authentication of the call from the RADIUS server.
3
The RADIUS server forwards the request to an ACE or Safeword server.
4
The ACE or Safeword server sends a challenge message (which may confirm
a null challenge) back through the RADIUS server and the NAS to the
calling unit.
5
A user on the remote network responds to the challenge message with the
current password, which is displayed on the security card.
If the user enters the correct password, network access is established.
If 60 seconds pass without a response to the challenge message, the call is
dropped.
If the user enters an incorrect password, the ACE or Safeword server sends
another challenge. After three incorrect passwords, the call is dropped.
Supporting outbound security card calls
The instructions in this section explain how you configure the Pipeline to place
calls to a remote NAS and to handle password challenges when they are returned
from the NAS.
WAN
MAX
(NAS)
User with
security card
ACE or SAFEWORD
RADIUS
Pipeline