Networks

Ask something
Discussion Locked

Remote Dial In

0 helpful
9 replies

by d_khairnar

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

In my organization we are planning to give access to our AS/400 for 6 remote users, who will log-in using the PSTN dial line ( Normal telephone line ). Can somebody give me the solution for the above requirement? I came to know that I can use dial in server from Cisco for the above requirement.The solution needs to be very secured.
Help Please.....

9 replies

by fenaikh

Hi
May i suggest this to you???
Make sure that any solution you choose it has a callback capbilitiy it is more secure than other solutions.
Good luck
Mohamed

by stngfan1

If you are going directly to the AS/400 use a Perle controller. This is a box with modems that controls access to an AS/400 only. You don't need any extra protocals for it. Just some setup on the 400.

If you use TCP/IP for your LAN and 400 think about a Shiva Lan Rover. This will allow users to log into your LAN and do what they need. Just like they are sitting at workstation in the office. This allows more to be accessed for the money spent, instead of just accessing a 400.

TM

by mckaytech

There are really two parts to your question since you need a secure solution. The first part is authentication and you can accomplish this by using callback and a strong authentication engine like that included in the Cisco 2509 Access Server.

But if you also need to protect the data traveling back and forth from interception, you'll need to use encryption on the traffic and put a VPN concentrator on the inside of the Access Server and a VPN client on the user's computer. Cisco also has a solution for that (the Cisco VPN 3000 series) but you're looking at some serious money for the combination of the two.

I'm most familiar with the Cisco products but other vendors have similar offerings (Shiva, Intel, 3Com, Perle).

paul

by mm63

Hi there,

Your best bet is a RAS solution. Depending on the level of security needed and the money available I would suggest 2 step authentication (using Radius) and dialback. The only problem taht you have with this is that the users are limitedto al?lways using the same nember so that if they are travelling - unless they use a GSM phone to dial in they will have a different number to dial back. You can get around this by letting them put the number in but there you open a whole new problem of identifying that the user really is who they say they are. A way around this would be to use a combination with a token based system - have a look at secureid s system. This can either be a piece of hardware or software based.
There are so many different possibilities that without more info of the exact req?s and limitations it is hard to give a definate answer.

HTH

Matt

This discussion is closed to new replies.