<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic ACS integration with two different external RSA database in Network Access Control</title>
    <link>https://community.cisco.com/t5/network-access-control/acs-integration-with-two-different-external-rsa-database/m-p/1339942#M338292</link>
    <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;I need a help in the following scenario:&lt;/P&gt;&lt;P&gt;we have ACS server in place and also a RSA server integrated with it to be used as Token authentication. Now we are planning a new RAS box which should also get integrated with the current ACS box. Can anybody has a clue or a datasheet which says that a single ACS box can support two external RSA database. &lt;/P&gt;</description>
    <pubDate>Sun, 10 Mar 2019 23:37:14 GMT</pubDate>
    <dc:creator>dominic.colson</dc:creator>
    <dc:date>2019-03-10T23:37:14Z</dc:date>
    <item>
      <title>ACS integration with two different external RSA database</title>
      <link>https://community.cisco.com/t5/network-access-control/acs-integration-with-two-different-external-rsa-database/m-p/1339942#M338292</link>
      <description>&lt;P&gt;Hi All,&lt;/P&gt;&lt;P&gt;I need a help in the following scenario:&lt;/P&gt;&lt;P&gt;we have ACS server in place and also a RSA server integrated with it to be used as Token authentication. Now we are planning a new RAS box which should also get integrated with the current ACS box. Can anybody has a clue or a datasheet which says that a single ACS box can support two external RSA database. &lt;/P&gt;</description>
      <pubDate>Sun, 10 Mar 2019 23:37:14 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-access-control/acs-integration-with-two-different-external-rsa-database/m-p/1339942#M338292</guid>
      <dc:creator>dominic.colson</dc:creator>
      <dc:date>2019-03-10T23:37:14Z</dc:date>
    </item>
    <item>
      <title>Re: ACS integration with two different external RSA database</title>
      <link>https://community.cisco.com/t5/network-access-control/acs-integration-with-two-different-external-rsa-database/m-p/1339943#M338356</link>
      <description>&lt;HTML&gt;&lt;HEAD&gt;&lt;/HEAD&gt;&lt;BODY&gt;&lt;P&gt;Dominic&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;There's a few issues here.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;1) Not sure if the native RSA external authenticator supports multiple instances - you've have to try it in ACS. Even then does the sd_conf config file tie you to a single RSA server?&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;2) Optionally if you have the RSA radius servers running you could create 2 external radius authenticators in ACS and do it that way.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;3) You'd need to manually assign ACS users to one or other RSA instance. Because of how long an RSA authentication can take (possibly with multiple challenge/responses - think new pin) ACS would find it hard to do "unknown user authentication" if it had to back out of one authentication before trying another.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;No to mention how long the client might wait for this to complete.&lt;/P&gt;&lt;P&gt;&lt;/P&gt;&lt;P&gt;Its a suck and see situation. It might work, or it might not. Good luck!&lt;/P&gt;&lt;/BODY&gt;&lt;/HTML&gt;</description>
      <pubDate>Wed, 05 Aug 2009 08:45:02 GMT</pubDate>
      <guid>https://community.cisco.com/t5/network-access-control/acs-integration-with-two-different-external-rsa-database/m-p/1339943#M338356</guid>
      <dc:creator>darpotter</dc:creator>
      <dc:date>2009-08-05T08:45:02Z</dc:date>
    </item>
  </channel>
</rss>

