A P P E N D I X F Cisco Secure Acs And Virtual Private Dial-Up Networks - Cisco Servers User Manual

VPDN Process
Figure F-1 VPDN User Dials In
Corporation
ACS
Figure F-2 NAS Attempts to Authorize Domain
Corporation
ACS
Cisco Secure ACS 3.0 for Windows 2000/NT Servers User Guide
F-2
RSP
ACS
If VPDN is enabled, the NAS assumes that the user is a VPDN user. The NAS
2.
strips off the "username@" (mary@) portion of the username and authorizes
(not authenticates) the domain portion (corporation.us) with the ACS. See
Figure F-2.
RSP
ACS
If the domain authorization fails, the NAS assumes the user is not a VPDN
3.
user. The NAS then authenticates (not authorizes) the user as if the user is a
standard non-VPDN dial user. See
Appendix F Cisco Secure ACS and Virtual Private Dial-up Networks
Call setup / PPP setup
Username = mary@corporation.us
VPDN user
User = mary@corporation.us
Authorization request
User = corporation.us
VPDN user
User = mary@corporation.us
Figure F-3.
78-13751-01, Version 3.0