ASA VPN login using RSA SDI and 2 RSA servers

lfkentwell — Mon, 11 Mar 2019 23:51:58 GMT

Can anyone help with what is probably a simple question. I will be pointing an ASA to use an RSA server fro 2 factor login using SDI. THere will be a primary and a replica (for redundancy) RSA server. Normally if you where pointing a windows machine to RSA you copy the sdconf.rec which tells the windows box there are 2 RSA servers to use if one is not available. WHen conifuring ASA to use RSA via SDI you dont copy a sdconf.rec

I know when you first authenticate a nodesecret file is created on the ASA. my question is if you dont copy an sdconf.rec to tell the ASA there is a backup RSA server how do i tell the ASA there is a backup? Do i create 2 SDI servers in the asa config? Does the nodesecret which is automatically created tell the ASA there is a backup RSA server?

Thanks.

ASA VPN login using RSA SDI and 2 RSA servers

Marcin Latosiewicz — Mon, 10 Sep 2012 08:25:59 GMT

Lance,

I think this will answer your question 🙂

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/access_aaa.html#wp1053384

Not specific to this, but there is an (old-ish) deployment guide by RSA:

http://www.rsa.com/rsasecured/guides/imp_pdfs/Cisco_ASA_AuthMan61.pdf

topic ASA VPN login using RSA SDI and 2 RSA servers in Network Security

ASA VPN login using RSA SDI and 2 RSA servers

ASA VPN login using RSA SDI and 2 RSA servers