topic Re: ACS 4.2 with RSA in Network Access Control https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186391#M368426 <HTML><HEAD></HEAD><BODY><P>Yes, it should be in ACS.</P><P></P><P>There are two options under the RADIUS Token Server Configuration</P><P></P><P>1. Timeout - in seconds </P><P>2. Fallback Retry Delay - in minutes</P><P>Change item 2 to 0.</P></BODY></HTML> Wed, 11 Mar 2009 16:08:43 GMT Yudong Wu 2009-03-11T16:08:43Z ACS 4.2 with RSA https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186388#M368423 <P>we have the vpn users authenticate using RSA token , &amp; ACS configured with RADIUS token server as the in the selected databases for unknown user policy ,</P><P></P><P>the problem is when we updraded from ACS 4 to Release 4.2(0) Build 124 a problem happened , sometimes authentication works &amp; sometimes don't , &amp; give this error in the authentication failure code : External DB reports error condition.</P><P></P><P></P> Sun, 10 Mar 2019 23:22:44 GMT https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186388#M368423 davidcruise 2019-03-10T23:22:44Z Re: ACS 4.2 with RSA https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186389#M368424 <HTML><HEAD></HEAD><BODY><P>it looks like hit this bug CSCsu86529.</P></BODY></HTML> Wed, 11 Mar 2009 05:05:18 GMT https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186389#M368424 Yudong Wu 2009-03-11T05:05:18Z Re: ACS 4.2 with RSA https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186390#M368425 <HTML><HEAD></HEAD><BODY><P>Thanks for your reply , in the bug description the action is to set </P><P>"fail back retry timeout" to 0</P><P></P><P>is this option in the acs ?</P></BODY></HTML> Wed, 11 Mar 2009 10:07:13 GMT https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186390#M368425 davidcruise 2009-03-11T10:07:13Z Re: ACS 4.2 with RSA https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186391#M368426 <HTML><HEAD></HEAD><BODY><P>Yes, it should be in ACS.</P><P></P><P>There are two options under the RADIUS Token Server Configuration</P><P></P><P>1. Timeout - in seconds </P><P>2. Fallback Retry Delay - in minutes</P><P>Change item 2 to 0.</P></BODY></HTML> Wed, 11 Mar 2009 16:08:43 GMT https://community.cisco.com/t5/network-access-control/acs-4-2-with-rsa/m-p/1186391#M368426 Yudong Wu 2009-03-11T16:08:43Z