nordic edge ASA 5500 Installation Manual page 3

9.2 Browse to Configuration, Remote Access VPN, AAA/Local Users, AAA Server Groups
and click Add. ...................................................................................................................................... 33
9.3 Name Server Group OTPserver, choose protocol RADIUS ................................................ 34
9.4 Add new radius server to the RADIUS group ....................................................................... 35
9.5 Configure Radius Server : Interface name, IP address to OTPserver and the pre-shared
key between the One Time Password server and Cisco ASA5500. ............................................... 35
9.6 Create a "test" connection profile (in case you want to test this for certain users only).
37
9.6.1 Browse to Configuration/Remote Access/Clientless SSL VPN Access/Connection Profiles
and click Add ..................................................................................................................................... 37
9.6.2 Specify Connection Profile Name ...................................................................................... 38
9.6.3 Specify AAA Server Group = OTPserver ......................................................................... 38
9.6.4 Edit Connection Profile Clientless SSL VPN Settings ....................................................... 40
9.6.5 Add Alias if user should be able to select authentication method by drop-down-list ........ 40
9.6.6 Edit Connection Profile Clientless SSL VPN Settings ....................................................... 41
9.6.7 Add Group URL if user should be able to select authentication by specifying URL ......... 41
9.6.8 If user should be allowed to select authentication method by drop-down-list, .................. 41
9.6.9 select this item. .................................................................................................................. 41
10 CONFIGURING ASA5500 FOR CISCO VPN CLIENT AUTHENTICATION WITH NORDIC
EDGE OTP SERVER ............................................................................................................................ 45
10.1 Add a new ( or Edit an existing) Cisco VPN Client Connection Profile to use the
OTPserver............................................................................................................................................. 45
10.2 At the Cisco VPN Client, create an entry with correct name and password ..................... 46
Name must match the connection profile name at previous slide. ........................................ 46
Password must match the pre-shared key in ASA5500. ......................................................... 46
(Note : This can be distributed via MSI installation) ........................................................................ 46
11 START TESTING ...................................................................................................................... 47
11.1 Enter your Userid and password as usual ............................................................................ 47
11.2 You will receive a one-time password to your mobile phone within a couple of seconds.
47
11.3 Enter your one time password and click on "OK". .............................................................. 48
12 PURCHASE ............................................................................................................................... 49
13 TECHNICAL QUESTIONS ........................................................................................................ 49
www.nordicedge.se Copyright, 2008, Nordic Edge AB
Installation Guide
Page 3 of 49