RSA Securid

[Lakeram Harrypersaud]

Has anyone used RSA Securid token to log into Cisco Routers, Switches and Firewalls to manage them. Is it even supported on Cisco devices? I am NOT talking about VPN access.

Any help will be greatly appreciated.

Thanks,

Lake

[Collin Clark · Accepted solution]

Yes, I have.On the router & switches you don't authenticate directly to the RSA server, it goes through an intermediate, like Cisco ACS.

[Lakeram Harrypersaud]

Thank you very much.

Regards,

Lake

[Lakeram Harrypersaud]

Hi Colin,

Can you please give me an overview of the setup or confirm my theory?

I assume i install the Cisco ACS server software on a Windows server and configure all the cisco devices to connect to the ACS server.

Then i setup my RSA appliance and configure the RSA appliance for communication with the Windows ACS server. Can i add the Windows ACS server as a host or a Radius client or?

I would really appreciate an answer for my question?

Thanks,

Lake

[Collin Clark · Accepted solution]

Your theory is correct. The only difference is that on the ACS server you setup VSA's so it communicates with the RSA server using it's "language". It's actually pretty easy to setup. It's more of a hassel using the tokens all the time than it is setting up the servers.

[Lakeram Harrypersaud]

Do i have to install the RSA agent on the Windows ACS server?

[Collin Clark · Accepted solution]

It's not required but a good idea for when you are troubleshooting

[Lakeram Harrypersaud]

I am a little confused. Then how will the two communicate? Do i just add the IP Address of the ACS server in RSA Appliance?

Thanks,

Lake

[Collin Clark · Accepted solution]

Maybe this will help.

http://www.rsa.com/rsasecured/guides/imp_pdfs/Cisco_ACS_42_AuthMan7.1.pdf

[Lakeram Harrypersaud]

Can this be done with Cisco ACS?

Thanks,

Lake

[Collin Clark]

Can what be done? The link above describes RSA with ACS.

[Lakeram Harrypersaud]

I mean if the Cisco routers, switches and firewalls can be setup so i can login using an RSA token without an ACS server.

Thanks,

Lake

[Collin Clark]

Hmm, not sure if the RSA software has a built-in RADIUS server. The RSA site may be able to help there.

[Lakeram Harrypersaud]

RSA Securid does have a built in Radius server

Thanks,

Lake

[Collin Clark · Accepted solution]

Then that should work. If you set it up that way, let us know for sure.