Nortel Switched Firewall 2.3.3 User’s Guide and Command Reference
Initial setup
67
213455-L, October 2005
SecurID authentication
NSF 5100 Series Release 2.3.3 supports configuration of the SecurID feature, which provides
a two-factor form of centralized authentication and management from the Command Line
Interface (CLI) or the Browser-Based Interface (BBI).
For more information about SecurID, see
Nortel Switched Firewall Series 5100 Release 2.3.3
Browser-Based Interface User’s Guide
, Part number 216383-D.
SecurID requires the following:
token authenticator
password
Token authenticators generate one-time passwords that are synchronized to an RSA
ACE/Server. Token authenticators can be either hardware or software.
Hardware tokens are keyring or credit-card-sized devices. Software tokens reside on the PC or
device from which the users wants to authenticate.
All tokens generate a random, one-time-use access code that changes at a designated
frequency.
A one-time-use code must be validated by the ACE Server in order to authenticate to a
protected resource.