SDI AAA authentication for ASDM/HTTP access

leesutcliffe · ‎04-27-2010

Hi,

I have two pairs of Cisco ASA firewalls (5510 and 5550) These has been configured foto authenticate SSH and HTTP connections by SDI/RSA SecurID.

Recently this has stopped working and each time I try to re-enable it, I get the following error:

ASA(config)#aaa authentication http console RSA LOCAL
ERROR: The SecurID protocol cannot be used to authenticate HTTP console connections

I've read conflicing information, some Cisco docs claim this isn't possible for HTTP connections, some say that it is.

What confuses me more is that this used to work!

Any help would be appreciated.

Thanks

Jennifer Halim · ‎04-28-2010

You are absolutely correct. It is not supported, and command reference clearly stated the same:

If it works at any point in time, it is not supported by Cisco as it has not been officially tested by the engineering team, hence not supported.

leesutcliffe · ‎05-04-2010

Is anyone aware of anyway of getting to work using an 'un-supported' method?

Clearly this is possible as we had it working previously