Does IOS support working as ipsec client with xauth?

[hansyin]

I'm trying to setup ios to connect to a third-party vpn gateway, that gateway need xauth authentication by sending a mode-cfg packet after phase1 finished, how can I make IOS respond that packet with a local username/password?

Currently ISAKMP debug shows "Unknown Input IKE_MESG_FROM_PEER,IKE_CFG_REQUEST" error when it received that mode-cfg packet.

Thanks.

[ivillegas]

If you want router to use X-Auth you will have to change the mode to aggressive. Change this and check if this works.

[hansyin]

you mean changing mode in IOS? I remember IOS will always try to use main mode and only try to use aggressive mode when main mode failed. Is there a command to force IOS to use only aggressive mode? what is it?

Thanks.