Cisco VPN: Encrypted Username and Password

[rsalomon]

Does the username/password sent from the client to the concentrator during the authentication phase of a vpn session get encrypted?

[vasthorvak]

yes it is already an encrypted tunnel using esp, then you are authenticated using the group name and password. if you want to prove it hook up a sniffer and see if you can see the group name/pass sent plain text, which you wont.