To Next Page

To Previous Page

Chapter 29: Security

STANDARD Revision 1.0 C4® CMTS Release 8.3 User Guide

(“echo” or “no echo”), the C4/c CMTS either displays the user’s response to the challenge on the terminal line or it does

not display it.

The Access-Request reply to an Access-Challenge packet includes the same mandatory attributes as specified in Attributes

in the Access-Request Packet section above. The user challenge response that was entered at the terminal line is included

as a User-Password attribute. Additionally, a State attribute is included unchanged, just as it was received in the

corresponding Access-Challenge.

AAA Method and Group Notes

The Access-Challenge support does not change the operation of AAA groups on the C4/c CMTS. Currently when there are

multiple RADIUS or TACACS+ groups listed within an AAA method, if a rejection is received for an authentication request

for the first group in the list, the C4/c CMTS attempts to authenticate against the next group in the method list. This same

behavior occurs when a rejection is received as a result of a RADIUS challenge response.

Operational Information and Caveats

Users of RADIUS should be aware of the following:

 The C4/c CMTS supports only Authentication. Authorization and Accounting are not supported by the C4/c CMTS even

if the RADIUS server does support them.

 This implementation of RADIUS supports only IPv4 Internet addresses. All RADIUS servers configured on the C4/c

CMTS must have IPv4 addresses.

 The Request Authenticator field generated by the C4/c CMTS in each Access-Request packet is cryptographically

secure. It has a lifetime in excess of one year.

TACACS+

TACACS+ Description

The Terminal Access Controller Access Control System Plus (TACACS+ ) is a TCP-based protocol supporting distinct

request/response transactions for authentication, authorization, and accounting. TACACS+ supports full payload

encryption via Message Digest version 5 (MD5) and offers authentication for a wide variety of user services including login,

Arris C4C User Manual

Questions and Answers: