Introduction

This chapter describes VPN IPSec connection of the bintec secure IPSec client™ to a bintec R3000™ VPN gateway with advanced authentication (XAuth) over a one-time password on the KOBIL SecOVID™ server. At VPN tunnel setup, a double authentication per one-time password is performed, generated over a KOBIL SecOVID™ token. When the VPN connection is set up, the bintec secure IPSec client™ is assigned a dynamic IP address (per IKE-Config Mode) from the local network. The bintec R3000™ VPN gateway is configured with a multiuser VPN peer allowing connections of several VPN clients.

Example scenario

Requirements

A bintec VPN gateway e.g. bintec R3000™ with system software 7.8.7 (XAuth support)
A bintec secure IPSec client™
A KOBIL SecOVID™ server installed on a Microsoft Windows computer (e.g. Server 2003 (32 Bit))
A KOBIL SecOVID™ token
VPN gateway and VPN client each require an independent Internet connection