Solved: Two-factor Authentication on ASA 5515-X, ISR 2911, 3750-x

sun_sazanov · ‎10-26-2016

Hi.

I have 3750-x (IOS 15.2(4)E2), ISR 2911 (IOS 15.5(3)M3) and ASA 5515-X (IOS 9.6.2).

Certification PCIDSS 3.2 requires Two-factor authentication for access to ssh (for managment).

What are the ways to implement the Two-factor authentication?

Google authenticator, secureid, cert...

Best regards,

Vyacheslav

Richard Burts · ‎11-04-2016

Vyacheslav

I have had good success with token based two factor authentication such as RSA. On ASA there are more options on how to authenticate and for the IOS based devices you will probably need to have the IOS device authenticate with a Radius or TACACS server which can then use the token server as its resource.

HTH

Rick

HTH

Rick

View solution in original post

Richard Burts · ‎11-04-2016

Vyacheslav

I have had good success with token based two factor authentication such as RSA. On ASA there are more options on how to authenticate and for the IOS based devices you will probably need to have the IOS device authenticate with a Radius or TACACS server which can then use the token server as its resource.

HTH

Rick

HTH

Rick