Security

Ask something
Discussion Locked

Choose an authentication server

0 helpful
2 replies

by jasonr2857

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

i have a mixed environment.NT AS/400,Unix/Linux
i have 3 sites but only 1 site has servers. all sites are 3DES Encrypted using Cisco 1700 routers. I am adding a PIX. so that clients can dial up to the net and 3DES to the PIX and inside the network.

Customer is complaining about mismatched usernames & passwords accross the systems.

What options do i have? i believe i need to put in and Auth server
RADIUS, Kerberos or something completly different?

Im pretty sure a radius server willsuit but i dont know much about other options.

any wisdom here?

2 replies

by jasonr2857

all sites have static IPs and are permanently connected to each other (ISDN, GRE Tunnels & 3DES)

by Member 20071246

Use Cisco Secure Access Control Server (ACS) for centralized, unified authentication. ACS can talk to LDAP or Active Directory or it can have its own database of users. This way things would get lot more manageable and will help you isloate faults sooner. Kerberos is not recommended. You could then use Cisco Secure policy Manager or Cisco Works 2000 to manage all these centrally.

Thanks,
Rookie

This discussion is closed to new replies.