xAuthUserTable
1.3.6.1.4.1.838.3.17.1.3.2
The Authentication User table. Remote dial-in clients can be
authenticated: locally using an internal database, or externally
using a Radius server server. Clients are defined internally
in this table. This table can have a special '<default>' entry
that defines the default user authentication method and
default client group name. The table lookup is always done first.
If the client's name is not found a 'default' entry defines
an alternative authentication methanism. If the 'default' entry
is not defined, and the client is not found in the table, the
client is denied access to the network, i.e. IPsec security
associations will not be created. If the client's name is
found in the table, the xauthUserAuthenProtocol
defines which authenication mechanism is to be used.
Specific users CAN be excluded by specifying 'always reject'
in the authentication protocol. The 'default' user can be
set to 'always accept' to allow ALL undefined users to
be automatically authenticated.
For 'internal authentication', whether through a specific
entry, or the default entry, the requested password must
match the configured password. '
Remote client example:
xauthUserName = xyz@company.com,
xauthUserPassword = abc,
xauthUserClientGroup = Engineering,
xauthUserAuthenProtocol = internalAuthentication.