Operation Manual

VigorBX 2000 Series User’s Guide
31
9
real-time method of credential generation. Most commonly that is a small keypad or display
unit to be carried around.
With DrayTek Mobile One-Time Passwords (MOTP), instead of carrying around an extra device,
you install a program on your mobile phone and that becomes your authentication device.
When you initially install the MOTP applet, you create a relationship with your VPN host
(router) by entering a unique authentication phrase into the router which the phone
generates. You also select a secret PIN. After that, each time want to log into your VPN you
enter your PIN into the phone and it generates your one-time password for that session.
In this way, you need both your phone and your PIN to connect the VPN so it is now a
two-layer authentication method. Only your own phone will work (unless you pair another
phone with the Vigor VPN server.) Next time you connect, a different login password will be
generated by your phone.
The One-Time Password program is Java based and can be installed on most modern cellular
phones, including Nokia, Apple iPhone, and Palm. The One-Time Password feature can be
used for any type of teleworker dial-in VPN - SSL, IPSec, L2TP or PPTP. There is no cost for the
phone applet and it can be downloaded directly to the phone if your phone has Internet
access.