[vpn] authentication with vpn

[Kurt Seifried]

Let the user set their password for the VPN. Of course then if the ISP is
compromised you got problems. An alternative is to use biometrics or tokens.


Kurt Seifried, kurt at seifried.org
A15B BEE5 B391 B9AD B0EF
AEB0 AD63 0B4E AD56 E574
http://www.seifried.org/security/


----- Original Message -----
From: <jean-philippe.planquart at wanadoo.fr>
To: <vpn at securityfocus.com>
Sent: Tuesday, January 01, 2002 2:56 PM
Subject: [vpn] authentication with vpn


>
>
>
> I want to deploy vpn service for home users to access to intranet network.
>
> Users will first connect through an ISP service, and then to an
authentication server to
> access to my intranet. With this solution, users must authenticate twice :
> - first to the ISP to authorize access to Internet
> - Second, to the authentication Gateway to authorize access to the
Intranet.
>
> Then, after authentication, we build vpn between home user and the
Gateway. With this
> solution, people have to learn 2 passwords ( for ISP and for my Gateway ).
> Has any body a solution to enter only one password ?
>
>
> VPN is sponsored by SecurityFocus.com
>


VPN is sponsored by SecurityFocus.com