SecurID and PIX 520

[Joseph Kahle]

I have a PIX 520 running 5.1(4). Have the statements necessary to set up IPSec VPN with pre-shared key. Company wants to allow access by outsiders. I Have ACE server doing TACACS+ on my AS5xxx for PPP dial-in. Can I use SecurID token as authentication? I work for some slightly paranoid people.

[bbaley]

I’d suggest trying to post your question in the AAA forum. You’re more likely to find someone who can help you with an issue like this in there.

[s-cerman]

PIX supports ACS and TACACS+ and ACS supports SecureID token.

but i did not understand ACE if it is "Easy ACS" which was bundled with cisco access servers before,

easy ACS does not support more than one device.

i think if you ve full version of ACS you can do it.

[uttaranc]

yes u can by turning on tacacs+ service on your ACE 4.1 server.

[hani]

as i recal, that my company had had this problems, yes you could use a secureID