Cisco Systems ASA 5500 manual 9.6.9

Installation Guide

9.2Browse to Configuration, Remote Access VPN, AAA/Local Users, AAA Server Groups

and click Add		33
9.3	Name Server Group OTPserver, choose protocol RADIUS	34
9.4	Add new radius server to the RADIUS group	35

9.5Configure Radius Server : Interface name, IP address to OTPserver and the pre-shared

key between the One Time Password server and Cisco ASA5500 35

9.6Create a ”test” connection profile (in case you want to test this for certain users only). 37

9.6.1Browse to Configuration/Remote Access/Clientless SSL VPN Access/Connection Profiles

and click Add		37
9.6.2	Specify Connection Profile Name	38
9.6.3	Specify AAA Server Group = OTPserver	38
9.6.4	Edit Connection Profile Clientless SSL VPN Settings	40
9.6.5	Add Alias if user should be able to select authentication method by drop-down-list	40
9.6.6	Edit Connection Profile Clientless SSL VPN Settings	41
9.6.7	Add Group URL if user should be able to select authentication by specifying URL	41

9.6.8If user should be allowed to select authentication method by drop-down-list, .................. 41

9.6.9		select this item	41
10	CONFIGURING ASA5500 FOR CISCO VPN CLIENT AUTHENTICATION WITH NORDIC
EDGE OTP SERVER			45

10.1Add a new ( or Edit an existing) Cisco VPN Client Connection Profile to use the

OTPserver		45
10.2	At the Cisco VPN Client, create an entry with correct name and password	46
￿ Name must match the connection profile name at previous slide		46
￿ Password must match the pre-shared key in ASA5500		46
(Note : This can be distributed via MSI installation)		46
11	START TESTING	47
11.1	Enter your Userid and password as usual	47

11.2You will receive a one-time password to your mobile phone within a couple of seconds. 47

11.3	Enter your one time password and click on “OK”	48
12	PURCHASE	49
13	TECHNICAL QUESTIONS	49

www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 3 of 49