nanog mailing list archives

Re: ABOVE.NET SECURITY TRUTHS?


From: Travis Pugh <tpugh () shore net>
Date: Fri, 28 Apr 2000 17:16:22 -0400 (EDT)



SecurID and ACE/Server work pretty well.

-travis

On Fri, 28 Apr 2000, Alec H. Peterson wrote:


Paul Froutan wrote:

I don't think you can.  However, I use TACACS on all my switches and
routers.  From what I know, TACACS passwords are encrypted using the key on
your network devices and the TACACS server.  So, that, in combination with
a private management LAN not accessible by your customers should lock down
your network pretty effectively.  Any comments?

Using TACACS+ with some sort of one-time-passwording works very well.

Alec

-- 
Alec H. Peterson - ahp () hilander com
Staff Scientist
CenterGate Research Group - http://www.centergate.com
"Technology so advanced, even _we_ don't understand it!"






Current thread: