How Auth to NT domain works on 3005 concentrator

[ontrack]

I was wondering what the 3005 running 3.5.3(A) is looking for when authenticating VPN users on a NT 4.0 domain. Is it just looking for a user & password match in the domain or does it look for the dial-up option to be checked for the user account in user manager. I would like it to do the second option if possible. Thanks for the help.

[awaheed]

Hi,

The concentrator just sends the username/passwd combination it receives from the Client and sends it to the NT Domain server. If the user exosts in the NT server database, he will be authenticated. If the NT Server will have the capability to actually figure out a difference between these accounts, then we might have what you want. But as of right now, we will just match the username/password combination.

Hope this helps,

Aamir Waheed,

Cisco Systems, Inc.

-=-=-

[paul.matthews]

If you need that functionality you need to add something like Ciscosecure ACS - that has the option to check the field.