Change from Pre-Shared Key to Authentication Server Setup

[squad133]

I currently have users authenticating to my network via VPN using the Safe-Net VPN 8.0 product. They do this using pre-shared keys. I wish to reconfigure to go away from pre-shared to some type of authentication server setup. I was an orginal user of the Cisco VPN 1.1 client, hence my continued use of the Safe-Net VPN Software. I am looking for a basic setup of VPN client to authenticate to the PIX and hopefully to a NT domain account. The PIX is a 515 with 6.3 OS. My domain is NT 4.0, with a mix of 2000 servers also. The remote users will be W2K with Safe-Net 8.0 software. Just can't seem to find a clear document on how to do this. Thanks.

 

[yizhar]

HI.

The PIX supports XAUTH which is what your looking for.
Your W2K servers can be configured with IAS which is a RADIUS server.
But I don't know if the Safe-Net client supports such authentication.

So your next step is to check the Safe-Net client documentation for such an option, and/or consider using the Cisco VPN client instead which supports XAUTH.


Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar