telnet vs ssh on Core equipment , looking for reasons why ?

Grace, Terry tgrace at thestar.ca
Tue Jul 31 21:20:50 UTC 2001


Actually, we do this now for our VPN users. Cisco Secure ACS 2.6 for NT
proxies authentication requests to an ACE/Server 5.0 (works with 4.1 as
well). Fairly stright forward to set up. I believe you can get evals of both
products. Both servers have replication partners for redundancy and sit in a
firewall DMZ. VPN users must log into a VPN web site using their tokens to
obtain the VPN client. 

Gonna try this with our routers RSN.

-----Original Message-----
From: Mike Hoskins [mailto:mike at TELEVOKE.COM]
Sent: Tuesday, July 31, 2001 4:04 PM
To: Grace, Terry
Subject: Re: telnet vs ssh on Core equipment , looking for reasons why ?



I've been thinking of doing precisely this...  Any pointers to info on
something like this?  I haven't researched it much yet (busy with IDS
atm).

Thanks,
-Mike

> "Grace, Terry" wrote:
> 
> Here's an alternative that might work. Authenticate via Radius which
> in turn proxies the authentication request to a SecurId server. With
> one time passwords, who cares if they get sniffed? You also get the
> benefit of having your Radius server being able to do
> accounting/access control on the sessions as well.
> 
> -----Original Message-----
> From: Dave Israel [mailto:davei at biohazard.demon.digex.net]
> Sent: Tuesday, July 31, 2001 2:43 PM
> To: alex at yuriev.com
> Cc: nanog at merit.edu
> Subject: RE: telnet vs ssh on Core equipment , looking for reasons why
> ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20010731/c7ad1e15/attachment.html>
-------------- next part --------------
Get to know us
http://www.thestar.com - Canada's largest daily newspaper online
http://www.toronto.com - All you need to know about T.O.
http://www.workopolis.com - Canada's biggest job site
http://www.torontostartv.com - Webcasting & Production
http://www.newinhomes.com - Ontario's Largest New Home & Condo Website
http://www.waymoresports.com - Canada's most comprehensive sports site


More information about the NANOG mailing list