CiscoWorks and one-time passwords

RICHARD MESSINGER · ‎04-10-2009

Customer is looking for a management solution for managing all their router and switch configurations. CiscoWorks will work if I can determine a way for the server to work with one-time passwords for ssh or telnet access.

Looked in the tech notes and I did not see anything that hints at a solution.

Any thoughts?

Thanks.

Marvin Rhoads · ‎04-10-2009

I might suggest using Cisco Secure ACS for Windows NT for authentication (set login module to ACS in CiscoWorks Common Services) and authenticating it to a RSA SecureID token server, if one exists in the customer's infrastructure. You then use ACS authentication for both CW and your network devices.

Not quick and dirty but it would address the requirements.

Here is a quick link: http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_server_for_windows/4.2/user/guide/UsrDb.html#wp461844

Hope this helps. Please rate this post if it does.

Joe Clarke · ‎04-10-2009

Allowing LMS to communicate with devices using OTP is possible, but there is no direct integration between LMS and various OTP generators. See this thread for more details:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Network%20Infrastructure&topic=Network%20Management&topicID=.ee71a02&fromOutline=&CommCmd=MB%3Fcmd%3Ddisplay_location%26location%3D.2cd29ea1