cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
495
Views
0
Helpful
1
Replies

DMVPN/S2S VPN With XAUTH?

acleri
Level 1
Level 1

I'm trying to work up a DMVPN solution, I'm not crazy about a PSK for all the sites.  I'd like to work with RADIUS and XAUTH in order to let me disable a remote S2S VPN simply disabling a specific users on the radius.

Is it supported?

1 Reply 1

olpeleri
Cisco Employee
Cisco Employee

It may work using network authorization with the following huge drawback. U will have to use aggressive mode [ meaning exchange the preshared key hash unencrypted]...

If you wanna do it securely U can do it using ikev2 flexvpn [ Then you can store the psk on the radius AND even use EAP to authenticate the remote site]

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: