RE: 2 factor authentication through vpn ?

for my vpn i only allow 2 pc's out side of the internal to connect. 1 in one office and 1 in another.

pretty basic setup..

users dialup to their own isp, then connect to my win2k vpn server via a freebsd nat/gateway pc.

2 users have vpn access pwd's which are different to their normal pwd.

and then just to make sure it's them, the dhcp server only serves 2 vpn ip addresses which have to match the MAC address on the NIC... probably not the best way, but atleast i know when they connecting they are connecting from the office pc's (unless someone stole the NICs or broke into the office).

so if the MAC addresses doesn't match, the connection is dropped because it won't get issued an IP.

stephen.

--
Success On Hold
(www.soh.co.za)

stephen@unix.za.net
tel: (031) 207 4811



On Thu, 5 Jun 2003, Dr. S. A. Vetha Manickam wrote:

> Another best option would be going for PKI based solution. Either you can buy only few




---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: 
http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek