RSA SecurID on W2K RRAS

[Jake Kim]

We are trying to have single SecurID authentication to allow users to
connect to the W2k RRAS server. If the user has the correct SecurID
passcode, the connection should be successful. No NT authentication,
just SecurID. Is this possible? We have tried all possible
combinations with the configurations on RRAS and SecurID ACE/Agent
without much luck.

We tried the 'unauthenticated access' security with enabled guest
account, and with RSA ACE/Agent enable for post mode. The EAP was
also tried and failed.

Can someone enlighten my knowledge on this RRAS issue?

Thanks in advance.

Jake Kim

 

[Wajihy [MSFT]]

you need to use the "RSA EAP" method as the authentication method, from the
client side and the RRAS server

 

[Jake Kim]

Hi Wajihy,

How would you configure on the client side? Unlike the "Post dial
terminal based authentication", the RSA EAP method from the RRAS do
not prompt the client for the required passcodes.

Thanks.

Jake

 

[Wajihy [MSFT]]

yes it does, I have tried it, and it will prompt for the passcodes as well

--

This posting is provided "AS IS", with NO warranties and confers NO rights

Hi Wajihy,

How would you configure on the client side? Unlike the "Post dial
terminal based authentication", the RSA EAP method from the RRAS do
not prompt the client for the required passcodes.

Thanks.

Jake

"Wajihy [MSFT]" <[email protected]> wrote in message

you need to use the "RSA EAP" method as the authentication method, from the
client side and the RRAS server

 

[Jake Kim]

Wajihy,

Can you share your config on the RSA Ace/Agent, the RRAS, and the
client? We are using the RSA Ace/agent v5.5 and RSA ACE/Server v4.1.

Thanks.

Jake

yes it does, I have tried it, and it will prompt for the passcodes as well

--

This posting is provided "AS IS", with NO warranties and confers NO rights

Hi Wajihy,

How would you configure on the client side? Unlike the "Post dial
terminal based authentication", the RSA EAP method from the RRAS do
not prompt the client for the required passcodes.

Thanks.

Jake

"Wajihy [MSFT]" <[email protected]> wrote in message

you need to use the "RSA EAP" method as the authentication method, from the
client side and the RRAS server

--

This posting is provided "AS IS", with NO warranties and confers NO rights
We are trying to have single SecurID authentication to allow users to
connect to the W2k RRAS server. If the user has the correct SecurID
passcode, the connection should be successful. No NT authentication,
just SecurID. Is this possible? We have tried all possible
combinations with the configurations on RRAS and SecurID ACE/Agent
without much luck.

We tried the 'unauthenticated access' security with enabled guest
account, and with RSA ACE/Agent enable for post mode. The EAP was
also tried and failed.

Can someone enlighten my knowledge on this RRAS issue?

Thanks in advance.

Jake Kim