cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1108
Views
0
Helpful
1
Replies

ASA 5510 Ipsec remote access - automatic user login

stukatinsky
Level 1
Level 1

I have an ASA5510 running 8.3(1).  90 users connect thru an Ipsec remote VPN using a very old Cisco VPN client (4.0.x).  Each user has his own group but they all connect using the same username and password.  This is currently connected to a 3000 concentrator and when the users click on the VPN client it connects both the group & user.  When connecting to the ASA and bypassing the 3000 concentrator, it connects the group but I have to click OK when the user name pops up.  How can I make it automatic so this step is not necessary?

Stu

1 Reply 1

Todd Pula
Level 7
Level 7

You can disable xauth under the respective tunnel group for your users via the "isakmp ikev1-user-authentication none" command.  This will disable the requirement for the user credentials and will rely only on the group name and password.

tunnel-group DefaultRAGroup ipsec-attributes
isakmp ikev1-user-authentication none