[c-nsp] Router 2 factor authentication

[Dominik Bay]

On Thu, 26 Aug 2010 10:42:28 +1000
Ben Steele <ben at bensteele.org> wrote:

> Out of curiosity can you tell me what led you to wanting 2FA for these
> devices, and how the traditional acl/tacacs method failed your
> requirements?

We are using RSA SecurID on P and PE Routers to secure the core network
and fullfil customer demands. 2FA on CE Routers is depending on the
customer-needs, those who asked for it on the PE and P are usually
having it on their CEs too.
On OOB Devices it's a 2-step auth with encryption and
callback.

Regards,
Dominik