bypass XAUTH for a single VPN Client

[SteveGodfrey]

We have a large number of VPN connections using the Cisco VPN client (V4) and XAUTH, I'd like to bypass the XAUTH stage for a single VPN connection/group. The remote peer will have a fixed IP address.

Any suggestions?

[gfullage]

Connecting into what?

If a PIX, then no, you can't do this cause xauth is defined globally, not per group.

If a VPN3000, then yes, just put this specific user into their own group and under that group config on the VPN3000, in the IPSec tab, set Authentication to None.

If a router, I'll have to think about that one. Let me know if you need me to expend the additional brain cells.

[SteveGodfrey]

We are using a PIX 525 at the head end. So at least that's answered my question!

Thanks.