SD WAN Remote Access - 3rd Party VPN Client Support

[tjansen123]

Hi All,

I have a client looking to deploy SD WAN remote access. They currently use Palo Alto firewalls, and have Global Protect as their VPN client. Naturally, all of the cisco documentation only mentions any connect. There is a small mention of 3rd party support but I was wondering if anyone had deployed this with 3rd part vpn clients ? Having 2 different VPN clients is not practical at all.

[Kanan Huseynli]

Hi,

never checked/ tested with 3rd party, but flexvpn supports it which is used by SD-WAN:

• Support for Cisco and third party software and hardware remote access clients

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/sdwan-ra/cisco-sd-wan-remote-access/m-sdwan-remote-access1.html

[abebeTelus]

is it possible to use SD-RA with local user AAA on the router instead of requiring ISE/RADIUS? for example on Meraki there is the option to use local authentication for AnyConnect or client vpn.