Configuring Authentication - Cisco CVPN3015-NR - VPN Concentrator 3015 Getting Started

Chapter 3 Using the VPN Concentrator Manager for Quick Configuration
Click Continue to proceed.
Step 7
When you configure the VPN Concentrator to service IPSec or L2TP VPN clients, you must configure
the users, users' Group, or Base Group to allocate client VPN (private side) addresses. VPN clients (as
opposed to Clientless access) require that the VPN Concentrator provide private-side IP addresses which
the clients then use to configure their virtual network adaptors.
You can configure these settings in the regular VPN Concentrator Manager on the following screens:
•
•
•

Configuring Authentication

The Manager displays the Configuration | Quick | Authentication screen. This screen appears only when
you enable at least one tunneling protocol.
Figure 3-8
You can choose how to authenticate users. You can select the VPN Concentrator internal server or one
of three external server types. You must select one server type. You can configure additional
authentication servers on the Configuration | System | Servers | Authentication screen using regular
system configuration.
Click the drop-down menu button and select the Server Type. The screen and its configurable fields
change depending on the Server Type. Choose one of the following:
•
•
•
•
•
78-15733-03
Configuration | System | Address Management — Set up a source of client addresses for Base
Group configuration and inherited groups.
Configuration | User Management | Groups | Address Pools — Set up address pools for specific
user groups.
Configuration | User Management | Users | Modify — Configure specific addresses for particular
users.
Configuration | Quick | Authentication Screen, Internal Server
Internal Server—The internal VPN Concentrator authentication server. (This is the default
selection.)
RADIUS—An external Remote Authentication Dial-In User Service server.
NT Domain—An external Windows NT Domain server.
SDI—An external RSA Security Inc. SecurID server.
Kerberos/Active Directory—An external Windows/Active Directory server or a UNIX/Linux
Kerberos server.
Configuring Authentication
VPN 3000 Series Concentrator Getting Started
3-11