CiscoWorks and one-time passwords

Unanswered Question
Apr 10th, 2009
User Badges:

Customer is looking for a management solution for managing all their router and switch configurations. CiscoWorks will work if I can determine a way for the server to work with one-time passwords for ssh or telnet access.

Looked in the tech notes and I did not see anything that hints at a solution.


Any thoughts?

Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Marvin Rhoads Fri, 04/10/2009 - 13:14
User Badges:
  • Super Silver, 17500 points or more
  • Cisco Designated VIP,

    2017 Firewalling, Network Management, VPN

I might suggest using Cisco Secure ACS for Windows NT for authentication (set login module to ACS in CiscoWorks Common Services) and authenticating it to a RSA SecureID token server, if one exists in the customer's infrastructure. You then use ACS authentication for both CW and your network devices.


Not quick and dirty but it would address the requirements.


Here is a quick link: http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UsrDb.html#wp461844


Hope this helps. Please rate this post if it does.

Joe Clarke Fri, 04/10/2009 - 14:16
User Badges:
  • Cisco Employee,
  • Hall of Fame,

    Founding Member

Allowing LMS to communicate with devices using OTP is possible, but there is no direct integration between LMS and various OTP generators. See this thread for more details:


http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&topicID=.ee71a02&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd29ea1

Actions

This Discussion