RSA token with Cisco VPN clients

[rolandshum]

I'm currently using the Cisco VPN client 3.6 that connects to a Pix version 6.3(4). I want to migrate to RSA's SecurID token to do authentication from RADIUS. Is it possible with those versions of software? I haven't been able to find any information on the client to support the SecureID.

[pmajumder]

Hello,

Yes it will work. You will need to configure the following:

On PIX:

=======

aaa-server client-auth protocol radius

aaa-server client-auth (inside) host timeout 20

crypto map EICMap client token authentication client-auth

ACE Server:

===========

On your RSA ACE server create an "Agent host" record pointing to the PIX and selecting "comm Server" as the type.

Regards

Pradeep

[ajagadee · Accepted solution]

Roland,

Yes, this is possible.

Please refer the below URL for details:

http://rsasecurity.agora.com/rsasecured/guides/imp_pdfs/Cisco_PIX_702_AuthMan61.pdf

Let me know if it helps.

Regards,

Arul