Date: Fri, 20 Apr 2001 09:57:58 -0400 From: "Barkell, Bill" <Bill.Barkell@compuware.com> To: 'Tony Landells' <ahl@austclear.com.au>, Otter <otterr@telocity.com> Cc: questions@FreeBSD.ORG, security@FreeBSD.ORG Subject: RE: remote SecureID authentication anyone? Message-ID: <A58643BEDEF7D211BABB0008C75D853F0A5F600F@fhpri01.compuware.com>
next in thread | raw e-mail | index | archive | help
Secure ID can be set up for VPN in the following manner: (there may be other ways as well) 1) VPN gateway is connected to internet 2) SecureID ACE server is set up on internal network 3) VPN gateway is told to pass authentication to the ACE server Client connects to the gateway, conversation takes place between the gateway and the ACE server, gateway grants access to client. This does work with several popular VPN gateway products. William Barkell Network Security Analyst Corporate Information Systems Compuware Corporation 31440 Northwestern Highway Farmington Hills, MI 48334 -----Original Message----- From: Tony Landells [mailto:ahl@austclear.com.au] Sent: Friday, April 20, 2001 3:33 AM To: Otter Cc: questions@FreeBSD.ORG; security@FreeBSD.ORG Subject: Re: remote SecureID authentication anyone? otterr@telocity.com said: > I'm looking to setup a machine in our office so a few of us can get in > on a VPN for network access after hours from home. I've heard VPNs are > possible. After discussing this with office management, they say the > only way we can do this is to use security in addition to passwords. > When I asked if our SecureID cards/keychains would work, they agreed > on it. Now... has anyone got this setup or something similar? I looked > on the mailing list archives with no luck... searched some web > pages... I even remember ssh2 using it, but now I don't see any > reference to it in the openssh or ssh2 makefiles. Answers and/or > suggestions are greatly appreciated. To some extent this depends what you're intending to use for your VPN. The SecurID server can be configured to handle RADIUS authentication, so any VPN software that can do RADIUS can do SecurID. Tony -- Tony Landells <ahl@austclear.com.au> Senior Network Engineer Ph: +61 3 9677 9319 Australian Clearing Services Pty Ltd Fax: +61 3 9677 9355 Level 4, Rialto North Tower 525 Collins Street Melbourne VIC 3000 Australia To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?A58643BEDEF7D211BABB0008C75D853F0A5F600F>