Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Webvpn authentication via SDI using PAP

I am trying to allow users accessing Webvpn on ASA (7.21) to authenticate against RSA SDI Token Server via ACS.

The ACS server is receiving authentication from the ASA box using CHAP, and because it knows the RSA SDI server only talks PAP - it is giving an unknown error.

Is there a way to make the ASA box talk PAP to the ACS box.

This is a configurable option for IPSEC but not for WEBVPN, although it was in previous versions.

Thanks in advance.

New Member

Re: Webvpn authentication via SDI using PAP

Unfortunately I can't even find how to make it talk PAP using IPSEC. Where is the magical checkbox or CLI hidden command that lets me do that?

Sorry I can't help you with the SSL side of things.