Setting Up Dial Security

Up to 80 accounts can be configured: One administrative account and seventy-nine accounts for guest users. The account profiles are stored in the host Courier's NVRAM (nonvolatile random access memory).

1. Setup of the Administrative Account

   Use any of the 80 available accounts for the admin (numbered 0 - 79).

   Use the AT%An command to set up user accounts. See the figure below for the five fields to concern yourself with.

   The AT%An command is automatically written to NVRAM. It does not require you to send &W.

   

   WARNING: Do not insert spaces between commas or between fields and commas. Spaces will invalidate the command.

   Example:	AT%A0=,y,y,n,5551212
   NOT:	AT% A0= ,y ,y ,n , 5551212

   Dialback Options

   You can set the Courier to automatically dial back a certain number after a client modem dials in.

   NOTE: There should always be four commas in the %A command. Do not insert spaces between commas or between fields and commas. Spaces will invalidate the command.

   To make the host Courier	Command	Example
   Hang up and then dial back a guest device at a specified number. Expect a pause of approximately 1.5 minutes before the modem dials back. You cannot alter the duration of the pause.	AT%A0=password,y,y,n,1 area code and phone number	AT%A0=corn,y,y,n,1,8475555555
   Prompt you to enter a number at which to dialback a device, and then have the Courier dialback the device at that number	AT%A0=password,y,y,y,	AT%A0=corn,y,y,y,
   Disable dialback	AT%A0=password,y,n,,	AT%A0=corn,y,n,,

   NOTE: To enable Dialback, you must enable Dial Security with Prompting. See Step 6 below!

2. Identify Your Account As The Administrative Account

   For your modem to	Command	Example
   Identify your account as the Administrative Account	AT%L	AT%L=PW0 This example sets account 0 as the Administrative Account.

   Once you set the administrative password, you cannot view or modify the guest account profiles unless you enter the correct administrative password.

   WARNING: Be sure to remember your administrative password. If you enable Dial Security and then forget your administrative password, you will be locked out of the Courier's dial security features. You will need to restore the factory defaults by setting DIP switch 10 ON. This will erase ALL passwords and you will have to reconfigure all your accounts.

3. Set Up Guest-User Accounts

   Use the AT%An command to set up guest-user accounts in the same way you set up your administrative account. You can set up up to 79 guest accounts. Refer to the figure in step 1 regarding information about formatting the AT%An command.

   After you have enabled the guest accounts, make sure the guest users know their passwords and the log-in procedure.

   Modifying Accounts

   After you have set up an account, you can modify each field independently. If a field is to remain unchanged from its original setting, just insert a comma, as shown: AT%A1=,,,Y,

   The command above allows the guest user to supply a dialback number that is different from the one stored in the original account record.

4. Enable Local Security

   WARNING: If you do not enable Local Security, the Dial Security settings will not be protected and other users will be able to change or erase them.

   For your modem to	Command
   Protect the administrative password (local security enabled)	ATS53.2=1

   NOTE: You must use the &W command to save the settings in NVRAM. If you don't, the next time you reset or power off the Courier, Dial Security will be disabled

5. Decide Which Dial Security Option To Use

   You can choose from the two types of Dial Security: Autopass and Password Prompting.

   Autopass Prompting - Autopass is the default form of password protection. Autopass automates the process of logging in to the host modem, but it requires the guest and host devices to be Couriers. When a guest device attempts an Autopass connection, the guest includes its password in its V.42 error-control request. The host modem checks all the enabled passwords in its security accounts for a match.

   Password Prompting - Password Prompting allows connections with any guest device, as long as the guest user knows the correct password. When the host has Password Prompting enabled, it asks guest users for a password. The host modem checks the received password against each of its active Security accounts. Note: There is no Password Prompting capability in synchronous mode.

   The table below is a comparison between Autopass and Password prompting.

   When using Autopass Prompting	When using Password Prompting
   Both the host and guest devices are made by USRobotics and have Dial Security enabled.	Guest devices don't have to support USRobotics Dial Security.
   The connection between the Couriers or modems is under V.42 error control (See Appendix B, Alphabetic Command Summary for information about using AT&M4 or AT&M5)	V.42 error-control connections aren't required
   If the guest includes an invalid password, the host sends an INVALID PASSWORD message and hangs up.	If the guest sends an invalid password, the host prompts twice more before disconnecting. If the guest does not send a password after 60 seconds, the host disconnects.
   If the guest includes a valid password, the host permits a secure connection.	The host will still always respond to a correct Autopass attempt.
   If the guest did not enable Dial Security, the host will not accept the call unless prompting is enabled on the host Courier.

6. Enable Dial Security

   NOTE: Before you enable Dial Security, you must set up an administrative account and password.

   For your modem to enable	Command
   Autopass Dial Security	ATS53.0=1
   Dial Security with Password Prompting (this also enables Autopass)	ATS53.0=1.1=1
   Dialback Security, enable Password Prompting and enable Dialback in each guest account	AT%An=password,y,y,y,phone number where n is the account number See the figure in previous section, Setting Up Dial Security for more information.

   Example: Issuing AT%A3=corn,y,y,y,5551234 to your modem will enable Password Prompting and Dialback for account 3, which has the password corn.

   You must use the &W command to save the settings for Enabling Autopass Dial Security and Dial Security with Password Prompting. If you don't, the next time you reset or power off the Courier, Dial Security will be disabled.

   If you need a reference when setting these command, you can use the ATI10 command. See Appendix B, Alphabetic Command Summary in the Command Reference Guide for more information about the ATI10 command.

7. Send ATZ or ATZ! to activate the Dial Security settings!

   For all Courier modems except the PC card version, make sure that DIP switch 10 is OFF, so the modem loads the settings stored in NVRAM.

   If DIP switch 10 is ON, the settings in ROM (&F0) are loaded, disabling dial security. You can retreive the dial security settings by setting DIP switch 10 OFF and resetting the Courier using ATZ or by toggling the power of the modem.

   For more information, please refer Customers to the Courier Command Reference.

   A default Step by step of an administrative account setup would be:

   ATE1

   AT%An (n=0 - 79)

   *Suggested to use 0 as the Administrative account for ease of use.

   AT%An (n=0 -79)=Password,y,y,n,14442225555

   *Only include Area code if required, otherwise use 7 digit only.

   AT%L=PWn (n=0 -79)

   *This command must be used to designate the administrative account.