cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1141
Views
5
Helpful
1
Replies

DMVPN and Radius authentication

Ruterford
Beginner
Beginner

Hello All,

Wondering if DMVPN can be configured with radius authentication.

If yes, can you please point me to some example configurations?

Thanks!

1 Reply 1

Hi Ruterford,

There is a way (even though I do not recommend it):

Configuring IKE Shared Secret Using AAA Server

However this feature is only supported in aggresive mode which means that the pre-shared-key will be exchanged across an unprotected connection, this means that the key will be compromissed.

I would recommend to you to use PKI instead or Flex VPN.

http://www.m00nie.com/2011/11/dmvpn-with-pki-authentication-gns3-lab/

PKI Service for Large Scale IPSec Aggregation

Example: Configuring the FlexVPN Server to Authenticate Peers Using EAP ---> Flex VPN

What is Flex VPN?

HTH.

Portu.

Please rate any helpful posts



Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers