Two-factor Authentication on ASA 5515-X, ISR 2911, 3750-x

[sun_sazanov]

Hi.

I have 3750-x (IOS 15.2(4)E2), ISR 2911 (IOS 15.5(3)M3) and ASA 5515-X (IOS 9.6.2).

Certification PCIDSS 3.2 requires Two-factor authentication for access to ssh (for managment).

What are the ways to implement the Two-factor authentication?

Google authenticator, secureid, cert...

Best regards,

Vyacheslav

[Richard Burts · Accepted solution]

Vyacheslav

I have had good success with token based two factor authentication such as RSA. On ASA there are more options on how to authenticate and for the IOS based devices you will probably need to have the IOS device authenticate with a Radius or TACACS server which can then use the token server as its resource.

HTH

Rick