Crypto Map - Question?

[a_mughal]

Will someone explain me the following two lines regarding the configuration of VPN Client 3.5 with 3 DES.

!

crypto map myclientmap client authentication list vpnusers

crypto map myclientmap isakmp authorization list vpngroup

!

Why should I MUST HAVE to use these lines when I am not using any AAA Authentication?

Thanks

[yusuff]

crypto map myclientmap client authentication

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122sup/122csum/csum2/122cssec/ssfike.htm#xtocid12

crypto map myclientmap isakmp authorization

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122sup/122csum/csum2/122cssec/ssfike.htm#xtocid14

If you are not using AAA server, then you do not need to do client authentication and isakmp authorization, you should remove it.

HTH

R/Yusuf

[a_mughal]

Yusuf Thanks for your reply. You are right that I should remove client authentication and isakmp authorization when I am not using AAA Server.

But the problem is when I am not using AAA server and remove these two lines, nothing is working and VPN Client is not able to connect. But when I remove the AAA Server but add these two lines than it is working. It is also very confusing for me as in my configuration other than AAA server, I did not mention any "myclientmap" map. So when I remove AAA Server than it should work without these two lines but it is not so.

Regards

Arshad