cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2962
Views
0
Helpful
3
Replies
Highlighted
Beginner

Using RSA with local AAA on cisco asa 5520

                   Is it possable to use rsa token on the ASA without setting up any other server just using the ASA, out clients use the cisco vpn client version 5.0.07.0290 and IOS 8.3(1), How would this be done?

3 REPLIES 3
Highlighted
Advocate

You may want to forward this to the vpn group as well. Just so I understand your question you are wanting to integrate the ASA with a token server or are you wanting the ASA to act as a standalone token server?

Thanks,

Tarik Admani
*Please rate helpful posts*

Tarik Admani
*Please rate helpful posts*
Highlighted

Yes I want the ASA to act like a standalone token server? is this possible?

Highlighted

Hi Perry,

I do not think so you can have the RSA Secure Id Auth setup locally with your ASA for the VPN users. RSA Secure id is possible only with the 2 options. i.e. AAA configs pointing to SDI or Radius servers which can have the communication with the RSA Secure ID Authentication Manager. You cannot have ASA to act as the RSA Auth Manager.

You can make your ASA to have the VPN users to auth locally in ASA but not as RSA.

RSA Secure id is possible for IPSec VPN, Web/SSL VPN & Firewall Authentication.

Please refer the below document for further information which has the complete information.

http://www.rsa.com/rsasecured/guides/imp_pdfs/Cisco_ASA_AuthMan61.pdf

Please do rate for all helpful posts.

By

Karthik

Content for Community-Ad