Introduction

This workshop describes the VPN IPSec Client connection of the bintec Secure IPSec Cliens™ to a bintec VPN gateway using an additional one-time password authentication. This is notified to the user when the connection is being set up in the form of a SMS (IPSec one-time password). The users and their mobile telephone numbers are managed in Active Directory on Windows Server 2008, and a bintec VPN gateway (e.g. bintec be.IP™) is used for VPN IPSec authentication purposes. The one-time password software of SMS PASSCODE™ accesses the Active Directory in order to send the one-time passwords by SMS and authenticates the user by using the RADIUS server (NPS) integrated in Windows Server 2008.

The GUI™ (Graphical User Interface) is used here for configuring the bintec VPN gateway.

Example scenario

Requirements

A bintec VPN gateway (e.g. bintec be.IP™ Version 10.1.1) which is accessible on the Internet via its IP address or via DNS
A Windows Server (e.g. Windows Server 2008 R2) with installed Active Directory role and available Network Policy Server (NPS/RADIUS server)
One-time password software of SMS PASSCODE™ Version 6 with compatible GSM modem/SIM card (for more information see http://www.smspasscode.com)
At least one bintec Secure IPSec Client™