E-3
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Appendix E Cisco Secure ACS and Virtual Private Dial-up Networks
VPDN Process
Figure E-3
Authorization of Domain Fails
If the ACS authorizes the domain, it returns the Tunnel ID and the IP address
of the home gateway (HG); these are used to create the tunnel. See
Figure E-4
.
Figure E-4
ACS Authorizes Domain
4.
The HG uses its ACS to authenticate the tunnel, where the username is the
name of the tunnel (nas_tun). See
Figure E-5
.
S6655
Corporation
VPDN user
User = [email protected]
ACS
RSP
ACS
Authorization
failed
S6647
Corporation
VPDN user
User = [email protected]
ACS
RSP
Authorization reply
Tunnel ID = nas_tun
IP address = 10.1.1.1
ACS
CHAP challenge
