Bay Networks NA User manual

Part No. 118358-A Rev. A
September 1997
Marketing Release 5.1
Remote Access
Concentrator Software
Server Tools for
Windows NT
Using

4401 Great America Parkway 8 Federal Street
Santa Clara, CA 95054 Billerica, MA 01821
Using Remote Access Concentrator Server Tools for Windows NTii
Copyright © 1997 Bay Networks, Inc.
All rights reserved. Printed in the USA. September 1997.
The information in this document is subject to change without notice. The
statements, configurations, technical data, and recommendations in this document
are believed to be accurate and reliable, but are presented without express or
implied warranty. Users must take full responsibility for their applications of any
products specified in this document. The information in this document is
proprietary to Bay Networks, Inc.
The software described in this document is furnished under a license agreement
and may only be used in accordance with the terms of that license. A summary of
the Software License is included in this document.
Trademarks
Optivity and Bay Networks are registered trademarks and Remote Annex,
Quick2Config, System 5000, Bay Networks Press, and the Bay Networks logo are
trademarks of Bay Networks, Inc.
Microsoft, MS, MS-DOS, Win32, Windows, and Windows NT are registered
trademarks of Microsoft Corporation.
All other trademarks and registered trademarks are the property of their respective
owners.
Restricted Rights Legend
Use, duplication, or disclosure by the United States Government is subject to
restrictions as set forth in subparagraph (c)(1)(ii) of the Rights in Technical Data
and Computer Software clause at DFARS 252.227-7013.
Notwithstanding any other license agreement that may pertain to, or accompany
the delivery of, this computer software, the rights of the United States Government
regarding its use, reproduction, and disclosure are as set forth in the Commercial
Computer Software-Restricted Rights clause at FAR 52.227-19.
Statement of Conditions
In the interest of improving internal design, operational function, and/or reliability,
Bay Networks, Inc. reserves the right to make changes to the products described in
this document without notice.
Bay Networks, Inc. does not assume any liability that may occur due to the use or
application of the product(s) or circuit layout(s) described herein.
Portions of the code in this software product are Copyright © 1988, Regents of the
University of California. All rights reserved. Redistribution and use in source and
binary forms of such portions are permitted, provided that the above copyright
notice and this paragraph are duplicated in all such forms and that any
documentation, advertising materials, and other materials related to such
distribution and use acknowledge that such portions of the software were
developed by the University of California, Berkeley. The name of the University
may not be used to endorse or promote products derived from such portions of the
software without specific prior written permission.

iiiUsing Remote Access Concentrator Server Tools for Windows NT
SUCH PORTIONS OF THE SOFTWARE ARE PROVIDED “AS IS” AND
WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING,
WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
In addition, the program and information contained herein are licensed only
pursuant to a license agreement that contains restrictions on use and disclosure
(that may incorporate by reference certain limitations and notices imposed by third
parties).

Using Remote Access Concentrator Server Tools for Windows NTiv
Bay Networks, Inc. Software License Agreement
NOTICE: Please carefully read this license agreement before copying or using the
accompanying software or installing the hardware unit with pre-enabled software
(each of which is referred to as “Software” in this Agreement). BY COPYING OR
USING THE SOFTWARE, YOU ACCEPT ALL OF THE TERMS AND
CONDITIONS OF THIS LICENSE AGREEMENT. THE TERMS EXPRESSED
IN THIS AGREEMENT ARE THE ONLY TERMS UNDER WHICH BAY
NETWORKS WILL PERMIT YOU TO USE THE SOFTWARE. If you do not
accept these terms and conditions, return the product, unused and in the original
shipping container, within 30 days of purchase to obtain a credit for the full
purchase price
1. License Grant. Bay Networks, Inc. (“Bay Networks”) grants the end user of the
Software (“Licensee”) a personal, nonexclusive, nontransferable license: a) to use
the Software either on a single computer or, if applicable, on a single authorized
device identified by host ID, for which it was originally acquired; b) to copy the
Software solely for backup purposes in support of authorized use of the Software;
and c) to use and copy the associated user manual solely in support of authorized
use of the Software by Licensee. This license applies to the Software only and does
not extend to Bay Networks Agent software or other Bay Networks software
products. Bay Networks Agent software or other Bay Networks software products
are licensed for use under the terms of the applicable Bay Networks, Inc. Software
License Agreement that accompanies such software and upon payment by the end
user of the applicable license fees for such software.
2. Restrictions on use; reservation of rights. The Software and user manuals are
protected under copyright laws. Bay Networks and/or its licensors retain all title
and ownership in both the Software and user manuals, including any revisions
made by Bay Networks or its licensors. The copyright notice must be reproduced
and included with any copy of any portion of the Software or user manuals.
Licensee may not modify, translate, decompile, disassemble, use for any
competitive analysis, reverse engineer, distribute, or create derivative works from
the Software or user manuals or any copy, in whole or in part. Except as expressly
provided in this Agreement, Licensee may not copy or transfer the Software or
user manuals, in whole or in part. The Software and user manuals embody Bay
Networks’ and its licensors’ confidential and proprietary intellectual property.
Licensee shall not sublicense, assign, or otherwise disclose to any third party the
Software, or any information about the operation, design, performance, or
implementation of the Software and user manuals that is confidential to Bay
Networks and its licensors; however, Licensee may grant permission to its
consultants, subcontractors, and agents to use the Software at Licensee’s facility,
provided they have agreed to use the Software only in accordance with the terms of
this license.
3. Limited warranty. Bay Networks warrants each item of Software, as delivered
by Bay Networks and properly installed and operated on Bay Networks hardware
or other equipment it is originally licensed for, to function substantially as
described in its accompanying user manual during its warranty period, which
begins on the date Software is first shipped to Licensee. If any item of Software
fails to so function during its warranty period, as the sole remedy Bay Networks
will at its discretion provide a suitable fix, patch, or workaround for the problem
that may be included in a future Software release. Bay Networks further warrants
to Licensee that the media on which the Software is provided will be free from
defects in materials and workmanship under normal use for a period of 90 days

vUsing Remote Access Concentrator Server Tools for Windows NT
from the date Software is first shipped to Licensee. Bay Networks will replace
defective media at no charge if it is returned to Bay Networks during the warranty
period along with proof of the date of shipment. This warranty does not apply if
the media has been damaged as a result of accident, misuse, or abuse. The
Licensee assumes all responsibility for selection of the Software to achieve
Licensee’s intended results and for the installation, use, and results obtained from
the Software. Bay Networks does not warrant a) that the functions contained in the
software will meet the Licensee’s requirements, b) that the Software will operate in
the hardware or software combinations that the Licensee may select, c) that the
operation of the Software will be uninterrupted or error free, or d) that all defects
in the operation of the Software will be corrected. Bay Networks is not obligated to
remedy any Software defect that cannot be reproduced with the latest Software
release. These warranties do not apply to the Software if it has been (i) altered,
except by Bay Networks or in accordance with its instructions; (ii) used in
conjunction with another vendor’s product, resulting in the defect; or (iii) damaged
by improper environment, abuse, misuse, accident, or negligence.

Using Remote Access Concentrator Server Tools for Windows NTvi
THE FOREGOING WARRANTIES AND LIMITATIONS ARE EXCLUSIVE
REMEDIES AND ARE IN LIEU OF ALL OTHER WARRANTIES EXPRESS
OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY WARRANTY OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.
Licensee is responsible for the security of its own data and information and for
maintaining adequate procedures apart from the Software to reconstruct lost or
altered files, data, or programs.
4. Limitation of liability. IN NO EVENT WILL BAY NETWORKS OR ITS
LICENSORS BE LIABLE FOR ANY COST OF SUBSTITUTE
PROCUREMENT; SPECIAL, INDIRECT, INCIDENTAL, OR
CONSEQUENTIAL DAMAGES; OR ANY DAMAGES RESULTING FROM
INACCURATE OR LOST DATA OR LOSS OF USE OR PROFITS ARISING
OUT OF OR IN CONNECTION WITH THE PERFORMANCE OF THE
SOFTWARE, EVEN IF BAY NETWORKS HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES. IN NO EVENT SHALL THE LIABILITY
OF BAY NETWORKS RELATING TO THE SOFTWARE OR THIS
AGREEMENT EXCEED THE PRICE PAID TO BAY NETWORKS FOR THE
SOFTWARE LICENSE.
5. Government Licensees. This provision applies to all Software and
documentation acquired directly or indirectly by or on behalf of the United States
Government. The Software and documentation are commercial products, licensed
on the open market at market prices, and were developed entirely at private
expense and without the use of any U.S. Government funds. The license to the
U.S. Government is granted only with restricted rights, and use, duplication, or
disclosure by the U.S. Government is subject to the restrictions set forth in
subparagraph (c)(1) of the Commercial Computer Software––Restricted Rights
clause of FAR 52.227-19 and the limitations set out in this license for civilian
agencies, and subparagraph (c)(1)(ii) of the Rights in Technical Data and
Computer Software clause of DFARS 252.227-7013, for agencies of the
Department of Defense or their successors, whichever is applicable.
6. Use of Software in the European Community. This provision applies to all
Software acquired for use within the European Community. If Licensee uses the
Software within a country in the European Community, the Software Directive
enacted by the Council of European Communities Directive dated 14 May, 1991,
will apply to the examination of the Software to facilitate interoperability.
Licensee agrees to notify Bay Networks of any such intended examination of the
Software and may procure support and assistance from Bay Networks.
7. Term and termination. This license is effective until terminated; however, all
of the restrictions with respect to Bay Networks’ copyright in the Software and
user manuals will cease being effective at the date of expiration of the Bay
Networks copyright; those restrictions relating to use and disclosure of Bay
Networks’ confidential information shall continue in effect. Licensee may
terminate this license at any time. The license will automatically terminate if
Licensee fails to comply with any of the terms and conditions of the license. Upon
termination for any reason, Licensee will immediately destroy or return to Bay
Networks the Software, user manuals, and all copies. Bay Networks is not liable to
Licensee for damages in any form solely by reason of the termination of this
license.
8. Export and Re-export. Licensee agrees not to export, directly or indirectly, the
Software or related technical data or information without first obtaining any
required export licenses or other governmental approvals. Without limiting the

viiUsing Remote Access Concentrator Server Tools for Windows NT
Remote Access Concentrator Software Server Tools for Windows NT
foregoing, Licensee, on behalf of itself and its subsidiaries and affiliates, agrees
that it will not, without first obtaining all export licenses and approvals required by
the U.S. Government: (i) export, re-export, transfer, or divert any such Software or
technical data, or any direct product thereof, to any country to which such exports
or re-exports are restricted or embargoed under United States export control laws
and regulations, or to any national or resident of such restricted or embargoed
countries; or (ii) provide the Software or related technical data or information to
any military end user or for any military end use, including the design,
development, or production of any chemical, nuclear, or biological weapons.
9. General. If any provision of this Agreement is held to be invalid or
unenforceable by a court of competent jurisdiction, the remainder of the provisions
of this Agreement shall remain in full force and effect. This Agreement will be
governed by the laws of the state of California.
Should you have any questions concerning this Agreement, contact Bay Networks,
Inc., 4401 Great America Parkway, P.O. Box 58185, Santa Clara, California
95054-8185.

Using Remote Access Concentrator Server Tools for Windows NT
Remote Access Concentrator Software Server Tools for Windows NT
viii
LICENSEE ACKNOWLEDGES THAT LICENSEE HAS READ THIS
AGREEMENT, UNDERSTANDS IT, AND AGREES TO BE BOUND BY ITS
TERMS AND CONDITIONS. LICENSEE FURTHER AGREES THAT THIS
AGREEMENT IS THE ENTIRE AND EXCLUSIVE AGREEMENT BETWEEN
BAY NETWORKS AND LICENSEE, WHICH SUPERSEDES ALL PRIOR
ORAL AND WRITTEN AGREEMENTS AND COMMUNICATIONS
BETWEEN THE PARTIES PERTAINING TO THE SUBJECT MATTER OF
THIS AGREEMENT. NO DIFFERENT OR ADDITIONAL TERMS WILL BE
ENFORCEABLE AGAINST BAY NETWORKS UNLESS BAY NETWORKS
GIVES ITS EXPRESS WRITTEN CONSENT, INCLUDING AN EXPRESS
WAIVER OF THE TERMS OF THIS AGREEMENT.

viiUsing Remote Access Concentrator Server Tools for Windows NT
Contents
About This Guide
Before You Begin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi
Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xi1
Acronyms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . x11
Ordering Bay Networks Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
Bay Networks Customer Service . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xiv
How to Get Help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xv
Chapter 1
Introduction
NA Utility Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-1
Windows NT Server Access Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Using RAC Documentation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
User Authentication Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Name Server Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Logging Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Documentation Exceptions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-3
Platform Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
Chapter 2
Selecting Server Tools Options
Selecting a Security Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Creating a RADIUS Authentication and Accounting Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-6
Selecting Booting/Logging Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Using the Event Viewer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10
Configuring a RADIUS Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Creating and Configuring a RADIUS Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-14
Modifying RADIUS Server Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-15
Deleting RADIUS Server Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-16
Displaying Version Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17
Chapter 3
Understanding Erpcd
Editing Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Using the acp_userinfo File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Defining User Profiles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-2
Using the acp_keys File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-16
Creating Encryption Keys . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-17
Using the acp_dialup File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-18
Using Local and Remote Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-19

Using Remote Access Concentrator Server Tools for Windows NT
Contents
viii
Chapter 4
Using Security Features
Using Windows NT Domain Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Support for Multiple Domains . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Multiple Domain Authentication Setup Procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-3
Setting RAC Security Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Security Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Types of Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5
PPP Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-6
CLI Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
Virtual CLI Security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
AppleTalk Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-7
Port Server Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8
Third Party Security Types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8
Using ACE/Server Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-8
Additional Security Types. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-9
RADIUS Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-10
RADIUS and ACP Protocol Operation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-11
RADIUS Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12
PPP and CHAP Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-12
Access-Request Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-13
Access-Accept and Access-Reject Attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15
RADIUS Accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-15
RADIUS Accounting Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
Accounting-Request Attributes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-16
RADIUS Configuration Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-17
Backup Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-21
RADIUS Dictionary File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-21

ixUsing Remote Access Concentrator Server Tools for Windows NT
Figures
Figure 2-1. The Server Tools Options Dialog Box. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
Figure 2-2. Event Viewer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Figure 2-3. The Radius Servers Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-13
Figure 2-4. The Version Dialog Box . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-17

Using Remote Access Concentrator Server Tools for Windows NT
Figures
x

xiUsing Remote Access Concentrator Server Tools for Windows NT
About This Guide
Using Bay Networks®Remote Access Concentrator Server Tools for
Microsoft®Windows NT®, you can to boot, configure, and manage
Remote Access Concentrators (RACs) on a Windows NT network.
This guide is intended for System Administrators or others who need to
configure RAC servers. It assumes that you are familiar with network
protocols and that you know the parameter values needed to configure
RACs.
This guide is part of the complete RAC documentation set. You
shouldrefertoother manuals in thesetforinformation not related
to Remote Access Concentrator Server Tools for Windows NT.
Before You Begin
Before using this guide, you must:
• Install the Remote Access Concentrator.
• Install the Remote Access Concentrator Software for Windows
and Windows NT.
If you want to Go to
Read an overview of Server Tools features Chapter 1
Learn how to set RAC security parameters Chapter 2
Understand erpcd and security requests Chapter 3
Use security features Chapter 4

Using Remote Access Concentrator Server Tools for Windows NT
About This Guide
xii
Conventions
This manual uses the following printing conventions:
Convention: Represents:
special type In examples, special type indicates system output.
special type Bold special type indicates user input.
In command examples, this notation indicates that
pressing enters the default value.
bold Bold indicates commands, pathnames, or filenames that
must be entered as displayed.
italics In the context of commands and command syntax,
lowercase italics indicate variables for which the user
supplies a value.
[ ] In command dialog, square brackets indicate default
values. Pressing selects this value. Square brackets
appearing in command syntax indicate optional
arguments.
{ } In command syntax, braces indicate that one, and only
one, of the enclosed value must be entered.
| In command syntax, this character separates the different
options available for a parameter.
Notes provide important information.
Warnings inform you about conditions that can have
adverse effects on processing.
Cautions notify you about dangerous conditions.
Return Return
Return

xiii
About This Guide
Using Remote Access Concentrator Server Tools for Windows NT
Acronyms
ACP Access Control Protocol
ARA AppleTalk Remote Access
ARAP AppleTalk Remote Access Protocol
bfs block file server
CHAP Challenge Handshake Authentication Protocol
CLI Command Line Interface
erpcd expedited remote procedure daemon
IP Internet Protocol
IPX Internetwork Packet Exchange
ISDN Integrated Services Digital Network
NFS Network File Server
PAP Authentication Protocol
PPP Point to Point Protocol
RAC Remote Access Concentrator
SLIP Serial Line Internet Protocol
TCP Transmission Control Protocol
TFTP Trivial File Transfer Protocol
UD User Datagram Protocol
VCLI virtual command line interface

Using Remote Access Concentrator Server Tools for Windows NT
About This Guide
xiv
Ordering Bay Networks Publications
To purchase additional copies of this document or other Bay Networks
publications, order by part number from Bay Networks Press™at the
following numbers:
• Phone--U.S./Canada: 888-422-9773
• Phone--International: 510-490-4752
• FAX--U.S./Canada and International: 510-498-2609
The Bay Networks Press catalog is available on the World Wide Web at support.baynetworks.com/Library/GenMisc. Bay Networks
publications are available on the World Wide Web at support.baynetworks.com/Library/tpubs.
Bay Networks Customer Service
You can purchase a support contract from your Bay Networks distributor
or authorized reseller, or directly from Bay Networks Services. For
informationabout,ortopurchaseaBayNetworksservicecontract,either
call your local Bay Networks field sales office or one of the following
numbers:
Information about customer service is also available on the World Wide Web at support.baynetworks.com.
Region Telephone number Fax number
UnitedStatesand
Canada 800-2LANWAN; then enter Express Routing Code (ERC) 290,
when prompted, to purchase or
renew a service contract
508-916-8880 (direct)
508-916-3514
Europe 33-4-92-96-69-66 33-4-92-96-69-96
Asia/Pacific 61-2-9927-8888 61-2-9927-8899
Latin America 561-988-7661 561-988-7550

xv
About This Guide
Using Remote Access Concentrator Server Tools for Windows NT
How to Get Help
If you purchased a service contract for your Bay Networks product from
a distributor or authorized reseller, contact the technical support staff for
that distributor or reseller for assistance.
If you purchased a Bay Networks service program, call one of the
following Bay Networks Technical Solutions Centers:
Technical Solutions Center Telephone number Fax number
Billerica, MA 800-2LANWAN 508-916-3514
Santa Clara, CA 800-2LANWAN 408-495-1188
Valbonne, France 33-4-92-96-69-68 33-4-92-96-69-98
Sydney, Australia 61-2-9927-8800 61-2-9927-8811
Tokyo, Japan 81-3-5402-0180 81-3-5402-0173

Using Remote Access Concentrator Server Tools for Windows NT
About This Guide
xvi

1-1Using Remote Access Concentrator Server Tools for Windows NT
Chapter 1
Introduction
Remote Access Concentrator Server Tools for Windows NT allows
you to boot and configure Remote Annexes and Remote Access
Concentrators (RACs) on a Windows NT network. You can manage one
or more RACs using the na utility. In addition, the product takes
advantage of Windows NT domains to authenticate and authorize users.
NA Utility Features
ThenautilityletsyoumonitorandmodifyRACoperatingcharacteristics.
It allows you to:
• Boot a RAC.
• Reset a RAC.
• Identify a RAC by its Internet address or host name.
• Set and show values for all RAC configuration parameters.
• Save current configuration parameter settings into script files.
• Copy the current configuration parameters from one port to
another or from one RAC to another.
• Create new site defaults.

Using Remote Access Concentrator Server Tools for Windows NT
Chapter 1 Introduction
1-2
Windows NT Server Access Security Features
Remote Access Concentrator Server Tools for Windows NT works with
a Windows NT Server to provide access security. You define user and
group access parameters in Windows NT, and link the appropriate group
definitions with the RAC using the Server Tools Options graphical user
interface.
Remote Access Concentrator Server Tools for Windows NT allows you
access to the standard RAC log file, a RADIUS server log file, and the
Windows NT Event Log.
Using RAC Documentation
In addition to this manual, you need the Managing Remote Access
Concentrators Using Command Line Interfaces and Remote Access
Concentrator Software Reference. These guides provide reference,
procedure, and feature descriptions.
BeawarethatminordifferencesexistbetweenWindowsNT-basederpcd
and UNIX-based erpcd. This section lists these issues, and guides you
to the appropriate manuals.
User Authentication Issues
Remote Access Concentrator Server Tools for Windows NT takes full
advantage of Windows NT Server user authentication and authorization.
Logon and remote dial-in events trigger security services from Windows
NT.Forinformationabout RemoteAccess ConcentratorServer Toolsfor
Windows NT user authentication, see Chapter 2, Chapter 3, and
Chapter 4 in this guide.