When we where using Cisco VPN client, we configured preshared key, under tunnel configuration, and that preshared key had to be configured on VPN client, and on ASA. And client had to have this preshared key if he wanted to connect to ASA. Is preshared key configurable in IKEv2 when tunnel is RA? If not, how can be configured client authentication in tunnel? Not only ASA authentication with certificate that IKEv2 uses.

  • Are you asking about site to site or vpn remote access for example anyconnect? Feb 2, 2017 at 12:22
  • Remote access (RA) vpn...client authentication in tunnel...but with IKEv2...yes, anyconnect
    – John
    Feb 2, 2017 at 12:23
  • for RA I would hook up it to directory like tacacs, LDAP, Radius, or AD. So users can authenticate against directory. Feb 2, 2017 at 12:25
  • In IKEv2 tunnel configuration? Do you have CLI example maybe?
    – John
    Feb 2, 2017 at 12:26
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it.
    – Ron Maupin
    Aug 7, 2017 at 16:14

1 Answer 1


Ideally you want to setup directory like Radius to authenticate against. Please see guide hope that help: guide

Although you can have a local users as per this guide: guide

  • 1
    @datagramnetwork it's better if you quote (or summarize) the information instead of just providing a link. That way, when links eventually go stale, the helpful information is still here.
    – Ron Trunk
    Feb 2, 2017 at 12:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.