Summary of the content on the page No. 1
RSA SecurID Ready Implementation Guide
Last Modified: March 8, 2006
Partner Information
Product Information
Partner Name MRV Communication, Inc.
Web Site www.mrv.com
Product Name LX Series
Version & Platform LX OS 3.6.0 or later
Product Description MRV Communications is a leading provider of network access solutions for
the enterprise edge, the seam where corporate networks meet the wide-
area public network and the service provider edge. The LX-Series advance
security protects access
Summary of the content on the page No. 2
Solution Summary The MRV LX-Series Secure Console/Terminal Servers have been specifically designed with a focus on security. The LX Series multi-processor platforms have the processing horsepower to handle the FIPS approved encryption and cipher algorithms required to meet demands of today’s high security environments. LX-Series platforms provide the highest and most comprehensive set security and encryption support of any Console or Terminal Server on the market today. The RSA SecurID Au
Summary of the content on the page No. 3
Agent Host Configuration To facilitate communication between the LX Product line and the RSA Authentication Manager / RSA SecurID Appliance, an Agent Host record must be added to the RSA Authentication Manager Database and RADIUS Server Database when using RADIUS. The Agent Host record identifies the LX Product line within its database and contains information about communication and encryption. To create the Agent Host record, you will need the following information. • Hostname • IP Add
Summary of the content on the page No. 4
Partner Authentication Agent Configuration Setting Up RSA SecurID Authentication (Command Line Interface) You can implement SecurID authentication at the server level and for specific interfaces and asynchronous ports on the LX unit. You must implement RSA SecurID Authentication at the server level before you can implement it on specific interfaces and asynchronous ports on the LX unit. The basic steps for configuring SecurID authentication on the LX unit are: 1. Specifying the RSA Authen
Summary of the content on the page No. 5
RSA SecurID Authentication Command Examples This section provides examples of all of the commands that are used to specify settings for the RSA Authentication Manager servers. AAA:0 >>securid primary authentication server address 10.242.131.11 AAA:0 >>securid authentication port 4500 AAA:0 >>securid primary authentication server name bigsky1.com AAA:0 >>securid authentication encryption des AAA:0 >>securid authentication retransmit 7 AAA:0 >>securid authentication timeout 3 AAA:0 >>sec
Summary of the content on the page No. 6
Setting Up RSA SecurID Authentication (Web Interface) 1. Point your browser to the LX IP address. (Browser must have Java 1.4.2 or higher installed.) 2. Login to the LX unit. 3. Click the Admin button on the upper tool bar. 6
Summary of the content on the page No. 7
4. Select SecurID under the Authentication Folder from the navigation tool bar on the left. Enter the desired information for your site. 7
Summary of the content on the page No. 8
Setting Up RADIUS (Command Line Interface) RADIUS Primary Authentication Server Commands Login: InReach Password: access InReach:0 >enable Password:****** InReach:0 >>configuration Config:0 >>aaa AAA:0>> radius primary authentication server address 10.242.131.13 AAA:0 >>radius primary authentication server port 1645 AAA:0 >>radius primary authentication server port 1812 AAA:0 >>radius primary authentication server secret STRING AAA:0 >>radius primary authentication server retransmi
Summary of the content on the page No. 9
Setting Up RADIUS (Web Interface) 1. Point your browser to the LX IP address. 2. Login to the LX unit. 3. Click the Admin button on the upper tool bar. 9
Summary of the content on the page No. 10
4. Select RADIUS under the Authentication Folder from the navigation tool bar on the left. Enter the desired information for your site. 10
Summary of the content on the page No. 11
Setting Up TACACS+ You can implement TACACS+ authentication and TACACS+ accounting at the server level and for specific interfaces and asynchronous ports on the LX unit. Access the AAA Configuration mode on the LX. TACACS+ Primary Authentication Server Commands AAA:0>> tacacs+ primary authentication server address 10.242.131.15 AAA:0 >>tacacs+ primary authentication server port 49 AAA:0 >>tacacs+ primary authentication server secret STRING AAA:0 >>tacacs+ primary authentication server r
Summary of the content on the page No. 12
Setting Up TACACS+ (Web Interface) 1. Point your browser to the LX IP address. 2. Login to the LX unit. 3. Click the Admin button on the upper tool bar. 12
Summary of the content on the page No. 13
4. Select TACACS+ under the Authentication Folder from the navigation tool bar on the left. Enter the desired information for your site. 13
Summary of the content on the page No. 14
Certification Checklist Date Tested: March 8, 2006 Certification Environment Product Name Version Information Operating System 6.1 Windows 2000 RSA Authentication Manager 3.6.0 LX-4000 LX-8000 LX Series Mandatory Functionality RSA Native Protocol RADIUS Protocol New PIN Mode Force Authentication After New PIN Force Authentication After New PIN System Generated PIN System Generated PIN User Defined (4-8 Alphanumeric) User Defined (4-8 Alphanumeric) User Defined
