Forum Discussion

OM's avatar
OM
Icon for Nimbostratus rankNimbostratus
Jun 18, 2016

RSA SecurID Multiple domain partitions

hello, I have 2 partition domains sharing the same RSA securid aaa. As the 2 partitions are using the same self-ip, the RSA server does not accept the connection from 2 apm instances at the same time...
aaa
application delivery
BIG-IP Access Policy Manager (APM)
securid
Lucas_Thompson_'s avatar
Lucas_Thompson_
Historic F5 Account
Jun 18, 2016

RSA can handle this OK, it's a configuration item called "Secondary node address". It's meant to be used in the situation that the authentication clients are behind a source-NAT or other similar situation.

 

The root of the problem is that there is only one copy of the linux RSA authentication daemon in BIG-IP at a time that runs in user space.