Two factor authentication using cisoc acs 5.2 & vasco

[acharyr123]

Hi,

All our network devices are configured with TACACS+ with ACS 5.2; authentication, authorization & accounting is working fine. We were trying to integrate ACS with Vasco for 2 factor authentication using RADIUS. While integrating, i found that because of authorization commad enabled on the network devices, user authentication was not successfull. I removed the authorization commands from the switch & it worked.

I need authorization facility as well as 2 factor authentication. Can someone suggest me how to proceed with this plz !!!

[camejia]

Hello,

When referring to "Two Factor Authentication" are you referring to two different password prompts?

Username:

Password:

OTP Password:

Or are you referring to:

Username:

OTP Password:

Also, did you change TACACS+ for RADIUS on the AAA Client (Network Device) configuration in order for it to communicate with the ACS server?

We will be waiting for your clarification.

Best Regards.

[acharyr123]

Hi,

My devices are configured to support TACACS+ with ACS.

I am looking at:

Username:

Password: PIN + OTP

If I disable authorization in the switch, it works fine.

Rgds,

Partha