Tut Systems SMS2000 Switch User Manual


 
Authentication
TUT Systems, Inc Page 47 of 104 P/N 220-06288-20
The auth add web command automatically adds an allow-net to the specified server so
that subscribers can be redirected to the allow-net without being intercepted. For more
information on allow-nets, see “Allow-Nets” on page 49.
To add a Web server as the authentication server for the current group, use this
command:
auth add web url secret secret [cmd-serv]
For this example, the SMS2000 will be configured to authenticate using the OCS server
at 192.168.254.249. The shared secret donttell will be used for mutual authentication
between the SMS2000 and the OCS. The OCS is treated as a command server by
periodically sending it requests for commands. Type:
sms2000% auth add web
http://192.168.254.249/pp/welcome.php3
secret donttell cmd-serv
Note:
This feature can be used to create an allow-net of sites that are accessable
without authentication.
Note:
A shared secret is similar to a password.
Deleting an Authentication Server
Use the auth delete command to automatically remove an allow-net for the IP address of
the Web server with a 32-bit subnet mask. If the same server is used as theWeb server
and the cmd-server, auth delete deletes the cmd-server also.
To delete an authentication server from the current group, use this command:
auth delete {
radius server|web url}
For example, to stop authentication using the Web server with the IP address
192.168.254.249, type:
sms2000% auth delete web 192.168.254.249
Note:
If no other servers are configured, authentication for the current group is
disabled.
Testing Authentication
To test authentication for the current group without using any specific server, use this
command:
auth on
For example, to enable authentication for the current group, type:
sms2000% auth on