28 Apr
2000
28 Apr
'00
5:16 p.m.
SecurID and ACE/Server work pretty well. -travis On Fri, 28 Apr 2000, Alec H. Peterson wrote:
Paul Froutan wrote:
I don't think you can. However, I use TACACS on all my switches and routers. From what I know, TACACS passwords are encrypted using the key on your network devices and the TACACS server. So, that, in combination with a private management LAN not accessible by your customers should lock down your network pretty effectively. Any comments?
Using TACACS+ with some sort of one-time-passwording works very well.
Alec
-- Alec H. Peterson - ahp@hilander.com Staff Scientist CenterGate Research Group - http://www.centergate.com "Technology so advanced, even _we_ don't understand it!"