I assume that you are referring to XAuth after the group/cert is authenticated. If so, yes you can perform XAuth on the specific group your user is being associated with. For example, by default, you can use the cert OU to associate the user to a spe...

even though Cisco supports crypto ACLs definitions with specific ports, we do not recommed to use object-groups and/or port ranges.

Hi,Your question:"Is the IKE fragmentation the reason for the availability of only the IPSec/udp or IPSec/tcp session types? "No. It should work with all... As a matter of fact, CSCdz30124 was filed for cTCP connections (IPSEC over TCP). In your case...

Hi Paul,The command 'show crypto ca crl' will not display the actual list of serial numbers of the certificates that have been revoked. It will only list the CRL Issuer information (i.e. CN, OU, etc) and information about the CDP and when the next up...

Hi,If you are using "pure Windows 2000 domain controllers" (i.e. not hybrid/mix mode) Windows will use DNS instead of WINS. Regards,Omar