Next Token Code Problems With Cisco Secure

[m.haran]

Hi,

I am running Cisco Secure (Hardware Appliance) along with RSA SecurID authentication server.

The problem I am having is with regards to dial-in users no longer being prompted for their next tokens in the event of unsuccessful logins. The RSA Server states that the user needs to enter their next token, however, they are never prompted and are simply dropped.

Any suggestions?

Regards

M.Haran

[wsherlock]

Are the users analogue dial-in users? Are they using post dial terminal window? If you use the agent to test users are they asked for next tokencode when needed? What OS are the remote users using?

Rgds

Will

[m.haran]

The users are analogue dial-in users (mostly Windows 2000 users). There is no difference when using either post terminal window or no terminal window on dialing

[wsherlock]

The only way they would be prompted is using post-dial terminal window. Are they using a Cisco RAS box? If so what is it and what IOS is it running. Can you paste the config? Also you say they no longer get prompted. Did it ever work correctly?

Rgds

Will