When we where using Cisco VPN client, we configured preshared key, under tunnel configuration, and that preshared key had to be configured on VPN client, and on ASA. And client had to have this preshared key if he wanted to connect to ASA. Is preshared key configurable in IKEv2 when tunnel is RA? If not, how can be configured client authentication in tunnel? Not only ASA authentication with certificate that IKEv2 uses.

  • Are you asking about site to site or vpn remote access for example anyconnect? – Datagram.Network Feb 2 '17 at 12:22
  • Remote access (RA) vpn...client authentication in tunnel...but with IKEv2...yes, anyconnect – John Feb 2 '17 at 12:23
  • for RA I would hook up it to directory like tacacs, LDAP, Radius, or AD. So users can authenticate against directory. – Datagram.Network Feb 2 '17 at 12:25
  • In IKEv2 tunnel configuration? Do you have CLI example maybe? – John Feb 2 '17 at 12:26
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it. – Ron Maupin Aug 7 '17 at 16:14

Ideally you want to setup directory like Radius to authenticate against. Please see guide hope that help: guide

Although you can have a local users as per this guide: guide

  • 1
    @datagramnetwork it's better if you quote (or summarize) the information instead of just providing a link. That way, when links eventually go stale, the helpful information is still here. – Ron Trunk Feb 2 '17 at 12:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.