View Single Post
  #5 (permalink)  
Old 2006-08-25
maurox maurox is offline
Member
 
Join Date: 2005-11-17
Location: Italy
Posts: 82
Rep Power: 3
maurox has an average reputation (10+)
Default Re: RSA authentication failure

Hi all,
on the "old" ( R55) cluster there isn't the flag for hide the outgoing traffic with the cluster IP.
But i find the solution on the release notes ( as suggested by northlandboy ) that say:
"When employing SecurID for authentication, it is recommended to define each cluster
member separately on the ACE/Server with its own unique (internal) IP address. In
addition, to send packets to the ACE/Server with their unique IP addresses and not the
VIP address, edit the file table.def, located in $FWDIR/lib. Change the line starting
with no_hide_services_ports to, for example, no_hide_services_ports = {<5500,
17>}, where 5500 is the service port and 17 (UDP) is the protocol."
I'm going to test it.....
Maurox
Reply With Quote