LMS 3.1 with RSA?

Answered Question
Apr 9th, 2009
User Badges:

Hi users,

I would like to know if it is possible to use RSA token solution to CiscoWorks LMS authenticate in monitored network devices. I mean, instead of using a fixed user/pass as usually, I would like to use a user with a pass which changes every minute, associate with a RSA client.


Does anyone know if it is possible a solution like this?

PS: I am not talking about the user/pass to log in CiscoWorks, but about user/pass/enable pass which CiscoWorks uses to log in the devices.


Thank you.

Regards,

Flaviano Leoncini.

Correct Answer by Joe Clarke about 8 years 1 month ago

There is no direct integration between RSA and LMS. You will have to provide the current RSA token at the time the job runs in order to make use of the rotating tokens.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Joe Clarke Thu, 04/09/2009 - 09:58
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Yes, this is possible using the job-based password feature. For every config change job you schedule, you will have to specify the job-based (i.e. RSA) credentials. Since RSA tokens change every minute, you will not be able to schedule jobs to run in the future, or run single jobs against large numbers of devices, though.


The job password option is available when scheduling the job.

flaviano.leoncini Thu, 04/09/2009 - 10:34
User Badges:

Hi Clarke,

Thanks for your answer. I didn't understand very well this feature. What you mean is that when using RSA I need to provide the credentials (user/pass) in real time, that is, I need to create a job and provide manually the pass that is valid for that current minut?

What I was looking for was a integration between CW and a RSA client, for instance. With this I could configure CW to always use RSA password, even for devices' configuration collection. So, do you think that this is possible?


Thank you very much,


Regards,

Flaviano Leoncini.

Correct Answer
Joe Clarke Thu, 04/09/2009 - 11:09
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

There is no direct integration between RSA and LMS. You will have to provide the current RSA token at the time the job runs in order to make use of the rotating tokens.

Actions

This Discussion