Cabletron Systems CSX1200 User Manual

Also see for CyberSWITCH CSX1000: User guide Quick start

Contents

Workgroup Remote Access Switch 175CONFIGURING D EVICE L EVEL DATABASESOff-node Device Database LocationO FF -NODE DEVICE D ATABASE L OCATION CONFIGURATION E LEMENTSD ATABASE LOCATIONThe database location for device level security. The choices for the off-node database location areNone (Use on-node), VRA Manager, or RADIUS. Choosing an off-node database location enablesthe particular database.Note: Enabling VRA Manager as the off-node device database location automatically enablesVRA Manager as a Call Control Manager. However, disabling VRA Manager as theauthentication agent will not disable VRA Manager as a Call Control Manager. Refer to theSecureFast Virtual Remote Access User’s Guide or the Configuring Call Control chapter of thisguide for more information.O FF -NODE DEVICE D ATABASE L OCATION BACKGROUND I NFORMATIONAn off-node, central database allows a network with more than one CyberSWITCH to access onedatabase for device authentication. The CyberSWITCH will access the off-node database to locateauthentication information on a remote device that is attempting to establish a connection.If the On-node Device Database has been enabled, and either VRA Manager or RADIUS has beenselected as the off-node database location, both databases will be searched for the deviceattempting the incoming or outgoing call. The on-node database will be searched and then, if thecorrect device is not found, the off-node database will be searched. Authentication is based ondevice information received from the first matching database. Matching a device is defined indifferent ways, depending on the call is made. For example, if an outbound call is made on an IPWAN interface by using the ip ping command, the IP address is the method that is used to searchthe database. If a matching IP address is found, a connection is attempted. If the system is unableto authenticate the peer, the connection attempt is done. The system will not attempt to continuesearching the remaining database entries or additional off-node database for the correct peer.