Networking Forums

Networking Forums > Computer Networking > Linux Networking > Re: Newbie Help with Linux VPN and OpenSwan.

Reply
Thread Tools Display Modes

Re: Newbie Help with Linux VPN and OpenSwan.

 
 
Vin McLellan
Guest
Posts: n/a

 
      03-02-2005, 05:13 PM
GoogleMike@@hotpop.com offered a bit of overclocked hyperbole when he
described his SecurID token:

> I use an RSA SecurID Keyfob that spits out a new 6 digit
> number every 10 seconds. When prompted to login (at
> least on Windows), I take my username of "gmike" and
> my passcode "4430" + SecurID number.


The classic RSA SecurID continuously generates and displays a new 6-8
digit (or alphanumeric) "token-code" every 60 seconds. As Mike noted,
SecurIDs are always used in a "two-factor" format that requires both a
user-memorized PIN or password, and a SecurID token-code, for a valid
user authentication.

Again, a SecurID LCD displays a new token-code every 60 seconds. A RSA
customer could do a special order, I suppose -- but I can't imagine any
circumstance in which anyone would want, or need, a SecurID that
generates a new token-code "every 10 seconds." That's a description
that can confuse or scare folks. Too fast for mere mortals or tcp/ip
networks, right?

Suerte,
_Vin

 
Reply With Quote
 
 
 
 
Michael Heiming
Guest
Posts: n/a

 
      03-02-2005, 05:57 PM
In comp.os.linux.networking Vin McLellan <(E-Mail Removed)>:
> GoogleMike@@hotpop.com offered a bit of overclocked hyperbole when he
> described his SecurID token:


>> I use an RSA SecurID Keyfob that spits out a new 6 digit
>> number every 10 seconds. When prompted to login (at
>> least on Windows), I take my username of "gmike" and
>> my passcode "4430" + SecurID number.


> The classic RSA SecurID continuously generates and displays a new 6-8
> digit (or alphanumeric) "token-code" every 60 seconds. As Mike noted,
> SecurIDs are always used in a "two-factor" format that requires both a
> user-memorized PIN or password, and a SecurID token-code, for a valid
> user authentication.


> Again, a SecurID LCD displays a new token-code every 60 seconds. A RSA
> customer could do a special order, I suppose -- but I can't imagine any
> circumstance in which anyone would want, or need, a SecurID that
> generates a new token-code "every 10 seconds." That's a description
> that can confuse or scare folks. Too fast for mere mortals or tcp/ip
> networks, right?


Absolutely, any card I have seen gives every 60 seconds a new
token, those are quite often used for slow dial-up/etc
connections.

You need some time to open the connection and the ace or so
server, which must not be the dial-in server or better should
not, needs some time for communication and calculating the token.
10 sec. are likely to short for all this to happen.

--
Michael Heiming (X-PGP-Sig > GPG-Key ID: EDD27B94)
mail: echo (E-Mail Removed) | perl -pe 'y/a-z/n-za-m/'
#bofh excuse 270: Someone has messed up the kernel pointers
 
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Linux Newbie tash Linux Networking 2 04-16-2007 11:11 AM
Openswan - XP->Linux tunnel DJ Linux Networking 0 01-25-2007 04:09 PM
OpenSwan - Linux VPN to Linux VPN walt750@gmail.com Linux Networking 1 06-13-2006 03:04 PM
Newbie Help with Linux VPN and OpenSwan. Google Mike Linux Networking 1 03-02-2005 06:52 AM
Newbie Trying To Understand OpenSwan Google Mike Linux Networking 0 02-27-2005 05:30 PM



1 2 3 4 5 6 7 8 9 10 11