topic Setting Auth Local - VPN Remote Access - PIX Ver 6 in Network Security https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806714#M491100 <P>Hi People,</P><P></P><P id="gt-res-content">My VPN Client is running on the PIX Version 6, how can i set the PIX to use local usernames and passwords instead of&nbsp; Radius auth ?</P><DIV dir="ltr" style="zoom: 1;"><P></P></DIV><P></P><P></P><P>Follow my conf :</P><P></P><P>aaa-server TACACS+ protocol tacacs+ </P><P>aaa-server TACACS+ max-failed-attempts 3 </P><P>aaa-server TACACS+ deadtime 10 </P><P>aaa-server RADIUS protocol radius </P><P>aaa-server RADIUS max-failed-attempts 3 </P><P>aaa-server RADIUS deadtime 10 </P><P>aaa-server LOCAL protocol local </P><P>aaa-server serverias protocol radius </P><P>aaa-server serverias max-failed-attempts 3 </P><P>aaa-server serverias deadtime 10 </P><P>aaa-server serverias (inside) host IAS senhaias timeout 5</P><P></P><P>sysopt connection permit-ipsec</P><P>sysopt connection permit-pptp</P><P></P><P>crypto ipsec transform-set VPNTRANS esp-3des esp-sha-hmac </P><P>crypto ipsec transform-set VPNTRANS1 esp-3des esp-md5-hmac </P><P>crypto dynamic-map remoteaccess 999 set transform-set VPNTRANS1</P><P>crypto map VPNMAP1 client configuration address initiate</P><P>crypto map VPNMAP1 client configuration address respond</P><P>crypto map VPNMAP1 client authentication engschahinmacae </P><P></P><P>isakmp enable outside</P><P>isakmp identity address</P><P>isakmp client configuration address-pool local company</P><P>isakmp policy 10 authentication pre-share</P><P>isakmp policy 10 encryption 3des</P><P>isakmp policy 10 hash sha</P><P>isakmp policy 10 group 2</P><P>isakmp policy 10 lifetime 86400</P><P></P><P>vpngroup VPNGR1 address-pool gerali</P><P>vpngroup VPNGR1 dns-server IAS</P><P>vpngroup VPNGR1 wins-server IAS</P><P>vpngroup VPNGR1 default-domain test.local</P><P>vpngroup VPNGR1 split-tunnel NAT0</P><P>vpngroup VPNGR1 idle-time 1800</P><P>vpngroup VPNGR1 password ********</P><P></P><P></P><P>Tks</P> Mon, 11 Mar 2019 22:02:13 GMT Thiago Cella 2019-03-11T22:02:13Z Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806714#M491100 <P>Hi People,</P><P></P><P id="gt-res-content">My VPN Client is running on the PIX Version 6, how can i set the PIX to use local usernames and passwords instead of&nbsp; Radius auth ?</P><DIV dir="ltr" style="zoom: 1;"><P></P></DIV><P></P><P></P><P>Follow my conf :</P><P></P><P>aaa-server TACACS+ protocol tacacs+ </P><P>aaa-server TACACS+ max-failed-attempts 3 </P><P>aaa-server TACACS+ deadtime 10 </P><P>aaa-server RADIUS protocol radius </P><P>aaa-server RADIUS max-failed-attempts 3 </P><P>aaa-server RADIUS deadtime 10 </P><P>aaa-server LOCAL protocol local </P><P>aaa-server serverias protocol radius </P><P>aaa-server serverias max-failed-attempts 3 </P><P>aaa-server serverias deadtime 10 </P><P>aaa-server serverias (inside) host IAS senhaias timeout 5</P><P></P><P>sysopt connection permit-ipsec</P><P>sysopt connection permit-pptp</P><P></P><P>crypto ipsec transform-set VPNTRANS esp-3des esp-sha-hmac </P><P>crypto ipsec transform-set VPNTRANS1 esp-3des esp-md5-hmac </P><P>crypto dynamic-map remoteaccess 999 set transform-set VPNTRANS1</P><P>crypto map VPNMAP1 client configuration address initiate</P><P>crypto map VPNMAP1 client configuration address respond</P><P>crypto map VPNMAP1 client authentication engschahinmacae </P><P></P><P>isakmp enable outside</P><P>isakmp identity address</P><P>isakmp client configuration address-pool local company</P><P>isakmp policy 10 authentication pre-share</P><P>isakmp policy 10 encryption 3des</P><P>isakmp policy 10 hash sha</P><P>isakmp policy 10 group 2</P><P>isakmp policy 10 lifetime 86400</P><P></P><P>vpngroup VPNGR1 address-pool gerali</P><P>vpngroup VPNGR1 dns-server IAS</P><P>vpngroup VPNGR1 wins-server IAS</P><P>vpngroup VPNGR1 default-domain test.local</P><P>vpngroup VPNGR1 split-tunnel NAT0</P><P>vpngroup VPNGR1 idle-time 1800</P><P>vpngroup VPNGR1 password ********</P><P></P><P></P><P>Tks</P> Mon, 11 Mar 2019 22:02:13 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806714#M491100 Thiago Cella 2019-03-11T22:02:13Z Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806715#M491101 <HTML><HEAD></HEAD><BODY><P>Review the below URL.</P></BODY></HTML> Thu, 15 Dec 2011 10:47:15 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806715#M491101 andrew.prince 2011-12-15T10:47:15Z Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806716#M491104 <HTML><HEAD></HEAD><BODY><P>What URL ?</P></BODY></HTML> Thu, 15 Dec 2011 14:08:31 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806716#M491104 Thiago Cella 2011-12-15T14:08:31Z Re: Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806717#M491106 <HTML><HEAD></HEAD><BODY><P>Ahh sorry about that - <A href="http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/tz.html#wp1099471">http://www.cisco.com/en/US/docs/security/pix/pix63/command/reference/tz.html#wp1099471</A></P><P></P><P><A href="http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/basclnt.html#wp1053271">http://www.cisco.com/en/US/docs/security/pix/pix63/configuration/guide/basclnt.html#wp1053271</A></P></BODY></HTML> Thu, 15 Dec 2011 15:58:01 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806717#M491106 andrew.prince 2011-12-15T15:58:01Z Re: Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806718#M491107 <HTML><HEAD></HEAD><BODY><P>Tks , Worked!</P></BODY></HTML> Thu, 15 Dec 2011 19:13:07 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806718#M491107 Thiago Cella 2011-12-15T19:13:07Z Re: Setting Auth Local - VPN Remote Access - PIX Ver 6 https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806719#M491111 <HTML><HEAD></HEAD><BODY><P>np glad to help</P></BODY></HTML> Thu, 15 Dec 2011 19:55:12 GMT https://community.cisco.com/t5/network-security/setting-auth-local-vpn-remote-access-pix-ver-6/m-p/1806719#M491111 andrew.prince 2011-12-15T19:55:12Z