Do I have to use a CSACS server to set up Xauth user authentication...

[rowleyt1]

when setting up IPSec between Cisco VPN Client 4.0.4 and a PIX 525 ? First and foremost I guess, do I have to configure Xauth user authentication in order for IPSec to work between the VPN Client and PIX firewall? I do not have a TACACS+ server and am just looking to set up remote access quickly. Any ideas?? Thanks in advance.

[owillins]

The authentication between the client and the PIX can be done using the local database on the PIX or an internal AAA server.

To use the local PIX Firewall user authentication database, enter LOCAL for the server-tag parameter for the aaa-server command. For more details, refer to the following document.

http://www.cisco.com/warp/customer/110/pixcryaaa52.shtml#newtopic

[shannong]

You don't not need XAuth at all. GroupName/Password is all that is required. Xauth is recommended and can be done with the local database or using RADIUS. All Win2k/2k3 server include RADIUS as part of the OS. It's referred by MS as IAS.