R2511-HP MSR Router Series Terminal Access Configuration Guide(V5)

87
Figure 15 IP terminal access
Terminal address binding
This feature prevents unqualified users from accessing the router. There are two address binding
methods:
• IP address binding
• IP-to-MAC address binding
If the terminal access information (IP address, or IP and MAC addresses) matches a configured binding
entry on the router, the terminal is considered qualified and is permitted to access the router. Otherwise,
the terminal cannot access the router.
If terminals connect to the access router through intermediate Layer 3 network devices, do not bind MAC
addresses for the terminals, because the MAC addresses contained in the packets arriving at the router
are not those of the terminals.
Server connection authentication
A user may need the FEP to perform authentication on the access router to enhance data security. These
authentication modes are supported:
• Character string-based authentication
• MAC-based authentication
In character string-based authentication, which is similar to password authentication, the same
authentication character string is configured on both the FEP and the router. To establish a connection to
the FEP, the router sends the authentication character string to the FEP, which compares the two strings.
If they match, the authentication succeeds. If not, the authentication fails and the connection attempt fails.
In MAC-based authentication, the same MAC address is configured on both the FEP and the router, and
the authentication process is the same as that of character string-based authentication. This MAC address
belongs to an interface on the router and can be specified with a command.
IP network
Terminal A Terminal B Terminal C
Router
FEP 1
FEP 2
Integrated
transaction
Corporate
banking
Savings