FlexVPN with local accounting

[WonderfulIT]

Hi all,

I've setup my first FlexVPN on a Cisco ISR 4431 without success and i keep getting an authentication or timeout error and i think that i've put in authentication remote eap query-identity without a server so firstly is this command meant to ONLY work as a sort of pass-through to a RADIUS server and if so what commands do i need to run to put it as a local authentication (i.e so the username and password are on the Cisco itself for the remote users to dial onto)

Thanks

[Rob Ingram · Accepted solution]

You would use "eap query-identity" as the remote authentication if using a RADIUS server. If authenticating locally you would use "anyconnect-eap aggregate"

Guide here