Cisco 2811 and two factor authentication.

[drew1701d]

Looking for feedback or sugestions on what is the best way to go to implement two-factor authentication on the 2811 router.
Is this support native within the 2811 or is an add on appliance like the RSA SecureID Appliance or a Cisco 3000 VPN concentrator required. We ideally would like an all in one solution that comes with the USB keys or FOBs.
TIA

 

[rtfmdude]

drew,

No matter what access device you have(IOS router, PIX, VPN3005), if you want to use one-time authentication/RSA key fob jobbie/whatever you'll probably still have to have a Radius/TACACS+ server(like CiscoSecure ACS) of some type to support the one-time-password vendor's setup.

http://www.cisco.com/en/US/partner/...2086/products_data_sheet0900aecd802fefd7.html

Table 1. Main Cisco Secure ACS Benefits

Third-Party Support

Cisco Secure ACS offers token server support for any OTP vendor that provides an RFC-compliant RADIUS interface (such as RSA, PassGo, Secure Computing, ActiveCard, Vasco, or CryptoCard).