Cisco 2509 - Router - EN User Manual page 611

Appendix E Cisco Secure ACS and Virtual Private Dial-up Networks
Figure E-7 NAS Authenticates Tunnel with ACS
Corporation
ACS
Figure E-8 VPDN Tunnel is Established
CHAP response
Corporation
ACS
78-14696-01, Version 3.1
RSP
ACS
After authenticating, the tunnel is established. Now the actual user
7.
(mary@corporation.us) must be authenticated. See
RSP
ACS
8. The HG now authenticates the user as if the user dialed directly in to the HG.
The HG might now challenge the user for a password. The Cisco Secure ACS
at RSP can be configured to strip off the @ and domain before it passes the
authentication to the HG. (The user is passed as mary@corporation.us.) The
HG uses its ACS to authenticate the user. See
Username = home_gate
Password = CHAP_stuff
VPDN user
User = mary@corporation.us
VPDN user
User = mary@corporation.us
User Guide for Cisco Secure ACS for Windows Server
VPDN Process
Figure E-8.
Figure E-9.
E-5