Tunnel between two Cisco VPN 3000 concentrators using NT domain login

dpatkins · ‎04-24-2003

We need to tunnel between two 3000 series concentrators. When the tunnel request is made, we need for the user to have to authenticate using our NT domain through ACS. I guess my question is first, is this doable and second, is there an example configuration that I have missed. The key is the user authentication. We need to make sure that no one has access to our network without a "need-to-know" basis. Can you set up two concentrators in a client-server mode like this?

Thanks

Dwane

Report Inappropriate Content · ‎04-30-2003

The concentrator will not be able to have the users authenticate via ACS for network access. It will only do authentication for VPN access. You will need the router or a PIX to send authentication requests to the ACS server.

dpatkins · ‎05-08-2003

Can you elaborate on the setup and the syntax for this? Do I put the router behind my concentrator and how would I do this? My understanding is that the users at the distant end would need to http into somewhere to authenticate. Is this true? How would I do that? Thanks for the input.

Dwane