When we where using Cisco VPN client, we configured preshared key, under tunnel configuration, and that preshared key had to be configured on VPN client, and on ASA. And client had to have this preshared key if he wanted to connect to ASA. Is preshared key configurable in IKEv2 when tunnel is RA? If not, how can be configured client authentication in tunnel? Not only ASA authentication with certificate that IKEv2 uses.
5
-
Are you asking about site to site or vpn remote access for example anyconnect?– Datagram.NetworkFeb 2, 2017 at 12:22
-
Remote access (RA) vpn...client authentication in tunnel...but with IKEv2...yes, anyconnect– JohnFeb 2, 2017 at 12:23
-
for RA I would hook up it to directory like tacacs, LDAP, Radius, or AD. So users can authenticate against directory.– Datagram.NetworkFeb 2, 2017 at 12:25
-
In IKEv2 tunnel configuration? Do you have CLI example maybe?– JohnFeb 2, 2017 at 12:26
-
Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide your own answer and accept it.– Ron Maupin ♦Aug 7, 2017 at 16:14
Add a comment
|
1 Answer
Ideally you want to setup directory like Radius to authenticate against. Please see guide hope that help: guide
Although you can have a local users as per this guide: guide
-
1@datagramnetwork it's better if you quote (or summarize) the information instead of just providing a link. That way, when links eventually go stale, the helpful information is still here. Feb 2, 2017 at 12:44