Can we use xauth for cisco router as a client?

[Deepak Ambotkar]

Hello,

I am thinking preconfigured router being  stolen as a scenario. Can we use xauth for cisco router as a client  instead of PC or softwaare for better security?

Thanks,
Deepak

[Karsten Iwen]

Yes, the IOS-router can act as an EasyVPN-remote device which has to authenticate with XAUTH if the EasyVPN server is configured for that.

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

[Deepak Ambotkar]

Karsten,

Thank you for the information. How can we enter the username/password in the case that we configure xauth for the cisco ios-router?

-Deepak

[Karsten Iwen]

the username is placed under the easyVPN client-config:

crypto ipsec client ezvpn PROFILE-NAME

  username USER password PASS

On the server (here on IOS) you should build a dedicated group for the hardware-client that allowes password-storage:

crypto isakmp client configuration group HWCLIENT-GROUP

  save-password

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni