vpn auth with ACS and Securid (RSA)

[fmadar]

I am using Vpn client 1.1, cisco router 1720, ACS 2.6 NT, ACE/Agent for NT 4.4 and ACE/Server. The ACS and ACE/Agent are in the same NT server. I can authenticate from the ACE/Agent directly to the ACE/Server and can authenticate the remote user to the ACS (using ACS database)but when try to authenticate the remote user to te ACE server trough the ACS something fails. Has anyone experience with this?

[ciscomoderator]

Since there has been no response to your post, it appears to be either too complex or too rare an issue for other forum members to assist you. If you don't get a suitable response to your post, you may wish to review our resources at the online Technical Assistance Center (www.cisco.com/tac) or speak with a TAC engineer. You can open a TAC case online at www.cisco.com/tac/caseopen

If anyone else in the forum has some advice, please reply to this thread.

Thank you for posting.

[weinema]

Maybe have a look at this Cisco document...

http://www.cisco.com/warp/customer/471/altigacsnt.html

Martin

[uttaranc]

Your information is noe adequate?pls be more elaborate about "something fails"

[rjorgensen]

It sounds like you do not have the SecurID server listed on the ACS External User Database. In the ACS admin, select external user database then make sure SDI SecurID is on. Also, check the User Setup menu and make sure Password Authentication has SDI SecurID selected. One more place would be to make sure the Cisco 1720 is listed in the Network Config as an Access Server Setup with IP address, key, and authenticate to appropiate settings.