topic Re: Cisco ACS with RSA ACE (Callback) in Network Access Control

Cisco ACS with RSA ACE (Callback)

schimekh — Sun, 10 Mar 2019 14:03:43 GMT

Hi !

I am using a Cisco ACS box combined with RSA ACE. Authentification is successful for the first time. But the router issues a callback and wants to authenticate twice. On the second attempt the tokencode is no longer valid - and callback is not successful because of the failure : RE-USE ATTACK

on the RSA ACE Server.

Why do I need a second authentification ? The call is successfully authenticated on the first time - why is there a second authentication needed ?

Thx Hans

Re: Cisco ACS with RSA ACE (Callback)

lisa.hall — Fri, 27 Sep 2002 16:17:34 GMT

You may need to configure Token Caching as shown here:

http://www.cisco.com/warp/public/129/25.html

http://www.cisco.com/warp/public/129/26.html#intro

You may also want to ask your RSA people if a similar feature is avalable in the ACE Server.

Re: Cisco ACS with RSA ACE (Callback)

guy.alexander — Mon, 06 Jan 2003 11:49:58 GMT

we are having the same problem you are describing .I see that your case is from september, did you solve it and how

thanks

guy

Re: Cisco ACS with RSA ACE (Callback)

vsanavia — Mon, 13 Jan 2003 13:48:53 GMT

Hi,

You have to instruct the router to only authenticate on dialin and not on dialout with the following command:

ppp authentication pap callin

Also, you have to mak e sure that you use PAP (instead of the default CHAP) when authenticating with RSA tokens. Hope this helps,

Regards,