TMS zl Management and Configuration Guide ST.1.2.100916

4-49
Firewall
User Authentication
Table 4-7. RADIUS Attributes Sent in Management Access RADIUS Request
The TMS zl Module supports three RADIUS authentication protocols:
■ Challenge Handshake Authentication Protocol (CHAP)
■ Microsoft Challenge Handshake Authentication Protocol (MS-CHAP)
■ Password Authentication Protocol (PAP)
CHAP. CHAP uses a three-way handshake to authenticate users. It also
randomly reauthenticates users throughout the session. The CHAP authenti-
cation process is shown in detail below.
Figure 4-30. CHAP Handshake
Attribute Value
Username Username submitted in the log in window
Password Password submitted in the log in window
Calling-Station-ID User’s IP address
NAS-Identifier NAS Identifier configured for the module when you
specified the RADIUS server
NAS-IP-Address Module IP address on the TMS VLAN that connects
to the RADIUS server
Service-Type NAS-Prompt-User