How to send authentication requests to alternative/secondary IP addresses of the RSA Authentication Manager 8.x server

[#1]

Article Number

000035131

Applies To

RSA Product Set: SecurID
RSA Product/Service Type: Authentication Manager
RSA Version/Condition: 8.x

Issue

This article explains how to send authentication requests to alternative/secondary IP addresses of the RSA Authentication Manager 8.x server.

Task

You can provide alternative IP addresses for each instance used for authentication. For example, you might do this if your authentication agents must communicate with an Authentication Manager instance on a server behind a firewall using a static network address translation (NAT).

Resolution

To add the alternativee IP addresses:

1. Login to the Security Console.
2. Select Setup > System Settings. 
3. Click Alternative Instance IP Addresses. 
4. Add the alternativee IP (secondary IP) of the replica in the replica row.
5. Click Save.

Image description

6. (Optional) Generate a new sdconf.rec file and add it to the agent(s).
   1. Form the Security Console select Access > Authentication Agents. 
   2. Click Generate Configuration File​.

​Image description

3. Click Download Now to download the AM_Config.zip file that is created.
4. Open the .zip and extract the sdconf.rec within.
5. Deploy the mew sdconf.rec to the authentication agents that need the alternative IP address information.