Secure Computing SG570 Manuel d'utilisateur télécharger pdf (Page 201)

Check Enable PPTP Server.

Enter the IP Addresses to give to remote hosts. This must be a free IP address, or a

range of free IP addresses, from the network (typically the LAN) that the remote users

are assigned while connected to the SnapGear unit.

If you have configured several network connections, select the one that you want to

connect remote users to from the IP Address to Assign VPN Server pull-down menu.

This is typically a LAN interface or alias.

Select the weakest Authentication Scheme to accept. Access is denied to remote

users attempting to connect using an authentication scheme weaker than this. They are

described below, from strongest to weakest.

Encrypted Authentication (MS-CHAP v2): The strongest type of authentication to

use, this is the recommended option.

Encrypted Authentication (MS-CHAP): This is not a recommended encryption type

and should only be used for older dial-in clients that do not support MS-CHAP v2.

Weakly Encrypted Authentication (CHAP): This is the weakest type of encrypted

password authentication to use. It is not recommended that clients connect using this

as it provides very little password protection. Also note that clients connecting using

CHAP are unable to encrypt traffic.

Unencrypted Authentication (PAP): This is plain text password authentication.

When using this type of authentication, the client password is transmitted un-

encrypted.

195

Virtual Private Networking

1 2 ... 196 197 198 199 200 201 202 203 204 205 206 ... 340 341

Pas de commentaire

Secure Computing SG570 Manuel d'utilisateur Page 201