Cisco 3.3 User Manual page 785

Appendix E VPDN Processing
Figure E-7
7.
Figure E-8
Corporation
8.
78-16592-01
NAS Authenticates Tunnel with ACS
Corporation
ACS
After authenticating, the tunnel is established. Now the actual user
(mary@corporation.us) must be authenticated. See
VPDN Tunnel is Established
CHAP response
ACS
The HG now authenticates the user as if the user dialed directly in to the HG.
The HG might now challenge the user for a password. The Cisco Secure ACS
at RSP can be configured to strip off the @ and domain before it passes the
authentication to the HG. (The user is passed as mary@corporation.us.) The
HG uses its ACS to authenticate the user. See
User Guide for Cisco Secure ACS for Windows Server
Username = home_gate
Password = CHAP_stuff
RSP
ACS
Figure
RSP
ACS
Figure
VPDN Process
VPDN user
User = mary@corporatio
E-8.
VPDN user
User = mary@corporatio
E-9.
E-5