cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
596
Views
0
Helpful
3
Replies

IPSEC requirements

mike.t
Level 1
Level 1

Do I need TACACS+ or RADIUS to connect Cisco VPN Client 3.0 users? How do I confugure for this?

3 Replies 3

rrbleeker
Level 1
Level 1

You don't need it, but it is stronly recommended to use Extended Authentication for VPN clients. You configure this by using the aaa-server commands to setup a RADIUS/TACACS+ authentication server and the 'crypto map xxxxx client authentication' command to setup Xauth for remote vpn clients. See http://www.cisco.com/warp/customer/110/B.html for an example setup.

How do I make a configuration that doesn't use RADIUS/TACACS+ for authentication, just using, per say, i.e. 'vpdn username cisco password cisco'. How do I get the PIX to use it's own user list to authenticate?

Mike, I am sorry, but the pix doesn't have an internal authentication scheme as a VPN concentrator or router does. You have to use either RADIUS or TACACS+.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: