Cisco VPN Concentrator Implementation Guide

Short Description
language in any form or by any means without the written permission of CRYPTOCard Corp . Cisco VPN Concentrator Implementation Guide …

Website: portal.cryptocard.com | Filesize: 313kb

Content
Copyright
Copyright . 2006, CRYPTOCard Corp. All Rights Reserved. No part of this publication may be
reproduced, transmitted, transcribed, stored in a retrieval system, or translated into any
language in any form or by any means without the written permission of CRYPTOCard Corp.
Cisco VPN Concentrator Implementation GuideCisco VPN Concentrator Implementation Guide 1
Cisco VPN Concentrator Application Overview
This document presents the necessary steps to configure a Cisco VPN 3000 Concentrator (models
3005 through 3080) for use with CRYPTOCard tokens.
The Cisco VPN 3000 Concentrator is used to create encrypted tunnels between hosts. The product
is able to control access to LAN resources and assign local IP addresses based on authentication
information, such as a username and password. CRYPTO-Server works in conjunction with the
Cisco VPN 3000 Concentrator to replace static passwords with strong two-factor authentication that
prevents the use of lost, stolen, shared, or easily guessed passwords when establishing a tunnel to
gain access to protected resources:
1. Using the Cisco VPN Client, the user establishes a connection to the internal network using
his/her logon name and PIN + One-time password.
2. The VPN concentrator passes the authentication information to the CRYPTO-Server (via the
RADIUS protocol).
3. CRYPTO-MAS Server sends back Access-Accept/Deny to the VPN concentrator.
4. Once successfully authenticated, the user gains access to the network.
The CRYPTO-Server distribution includes a plug-in for the Cisco VPN Client software which, when
used in conjunction…