Installation Guide9.2 Browse to Configuration, Remote Access VPN, AAA/Local Users, AAA Server Groupsand click Add. ...................................................................................................................................... 339.3 Name Server Group OTPserver, choose protocol RADIUS ................................................ 349.4 Add new radius server to the RADIUS group ....................................................................... 359.5 Configure Radius Server : Interface name, IP address to OTPserver and the pre-sharedkey between the One Time Password server and Cisco ASA5500. ............................................... 359.6 Create a ”test” connection profile (in case you want to test this for certain users only).379.6.1 Browse to Configuration/Remote Access/Clientless SSL VPN Access/Connection Profilesand click Add ..................................................................................................................................... 379.6.2 Specify Connection Profile Name ...................................................................................... 389.6.3 Specify AAA Server Group = OTPserver ......................................................................... 389.6.4 Edit Connection Profile Clientless SSL VPN Settings ....................................................... 409.6.5 Add Alias if user should be able to select authentication method by drop-down-list ........ 409.6.6 Edit Connection Profile Clientless SSL VPN Settings ....................................................... 419.6.7 Add Group URL if user should be able to select authentication by specifying URL ......... 419.6.8 If user should be allowed to select authentication method by drop-down-list, .................. 419.6.9 select this item. .................................................................................................................. 4110 CONFIGURING ASA5500 FOR CISCO VPN CLIENT AUTHENTICATION WITH NORDICEDGE OTP SERVER ............................................................................................................................ 4510.1 Add a new ( or Edit an existing) Cisco VPN Client Connection Profile to use theOTPserver............................................................................................................................................. 4510.2 At the Cisco VPN Client, create an entry with correct name and password ..................... 46 Name must match the connection profile name at previous slide. ........................................ 46 Password must match the pre-shared key in ASA5500. ......................................................... 46(Note : This can be distributed via MSI installation) ........................................................................ 4611 START TESTING ...................................................................................................................... 4711.1 Enter your Userid and password as usual............................................................................ 4711.2 You will receive a one-time password to your mobile phone within a couple of seconds.4711.3 Enter your one time password and click on “OK”. .............................................................. 4812 PURCHASE............................................................................................................................... 4913 TECHNICAL QUESTIONS........................................................................................................ 49www.nordicedge.se Copyright, 2008, Nordic Edge AB Page 3 of 49