08-25-2005 02:12 AM - edited 02-21-2020 01:55 PM
Is it possible to configure the Cisco VPN client to use IKE Main Mode negotiation with pre-shared keys? And with digital certificates? If yes, how could I do it?
08-25-2005 10:40 PM
just wondering the reason to insist the use main mode. both main and aggresive modes achieve the same result, except less steps involved with aggresive.
08-25-2005 11:39 PM
When a VPN is configured to use pre-shared keys and permits the VPN client to negotiate the session in aggressive mode, it sends a hash of this key in clear text, so...
The solution for this should be to deactivate the option which permits the VPN client to use aggressive mode.
This is why I'd like to know if I can force the VPN client to negotiate only in main mode.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide