VPN Client -> ASA Group+Shared secret only?

[johnelliot6]

Hi,

Have users connecting into ASA, and they are required to enter Group+Shared secret, but then also a username+password(Which we have added as local accounts on the ASA) - Is there anyway to have just Group+shared secret auth?

Thanks in advance

[Yudong Wu]

http://www.cisco.com/en/US/docs/security/asa/asa80/command/reference/a2.html#wp1629625

check the above command reference, under related tunnel-group, add "authentication-server-group NONE" to disable user authentication.

[johnelliot6]

Thanks Kevin!

Appears that command is now deprecated, new command is:

isakmp ikev1-user-authentication none

Under tunnel-group foo ipsec-attributes

Thanks again for the assistance.