New PIN and next Tokencode modes fail when dialing through a Cisco NAS
Originally Published: 2000-03-10
Article Number
Applies To
UNIX (AIX, HP-UX, Solaris)
Microsoft Windows NT 4.0
Cisco NAS
Issue
User token is in New PIN mode
User token is in next Tokencode mode
Next Tokencode mode fails
User unable to clear next Tokencode mode or to set up PIN because the standard timeout closes the connection
Authentication fails
Cause
Resolution
If the IOS version is 11.3 or greater, the following command can be entered in the Cisco NAS line config:
timeout login response XXX
where XXX represents the timeout value from 0 to 300 seconds. The default is 30, so we recommend to use 60.
With an IOS version of 12.3-7.T1, the following commands can be entered in the Cisco NAS line config:
For Dial-Up:
timeout login response XXX
login authentication RAS USERS
For VPN:
crypto isakmp xauth timeout XXX
Related Articles
Cisco Router with IOS 12.2(2)XB/12.2(4)T or later unable to handle New PIN Mode and Next Tokencode Mode Authentications th… Number of Views Error during migration: Error: Failed to massage migrated data org.postgresql.util.PSQLException: ERROR: update or delete… Number of Views How to set PINs and navigate Next Tokencode Mode for RSA SecurID Tokens using NTRadPing on SecurID Authentication Manager … Number of Views Incompatibility with Encoding of Private Key causes various issues on an RSA SecurID Access Identity Router running SLES12… Number of Views RSA Authentication Manager 8.1 SP 1 patch 1 backups to a Windows Shared Folder are failing after software upgrade Number of Views
Trending Articles
Passwordless Authentication in Windows MFA Agent for Active Directory – Quick Setup Guide RSA Authentication Manager 8.9 Release Notes (January 2026) RSA Authentication Manager Upgrade Process RSA Authentication Manager 8.7 SP2 Setup and Configuration Guide An example of SSO using SAML and ADFS with RSA Identity Management and Governance 6.9.x
Don't see what you're looking for?
