topic Re: RSA 2-Factor authentication in Cisco CLI Analyzer

RSA 2-Factor authentication

jwillie3 — Mon, 26 Jun 2017 17:39:18 GMT

In my environment there is a requirement to use RSA 2-factor authentication using a One-Time Password.

I don't seem to find an option for enabling or setting this up.

Am I missing something or is this feature not available?

-Thanks

Hi jwillie3,

kevwilso — Mon, 26 Jun 2017 17:45:26 GMT

Hi jwillie3,

Two-Factor authentication is not currently supported. Can you explain your workflow though?

Thanks,

Kevin W.

Workflow?

jwillie3 — Mon, 26 Jun 2017 17:59:44 GMT

Workflow?

If you are referring to the AAA flow its pretty basic.

We SSH to a device

AAA sends request to ISE

ISE is setup to pass credentials to RSA server

RSA server is expecting the User ID (Active directory) and OTP

RSA responds to ISE with an accept

ISE responds to device with access-accept

Re: Workflow?

kocon0010 — Thu, 04 Jan 2018 15:40:17 GMT

i also have this issue, is there a way to turn off the auto sign in functionality of cli analyzer? I am happy to enter my creds once connected to the end device as I need to sign in with radius, then enter the 2 factor pin.

Thanks

Luke

Re: Hi jwillie3,

kocon0010 — Mon, 02 Apr 2018 15:08:06 GMT

Is there any intent or road map for CLI Analyzer to support 2 factor?

Re: RSA 2-Factor authentication

Matt Bowman — Mon, 04 Jun 2018 17:07:28 GMT

I am having this issue as well. I agree with Luke. An option to turn off the auto sign in functionality of cli analyzer would be helpful, and maybe a work around for the 2FA troubles.

-Matt