DMVPN and Radius authentication

[Ruterford]

Hello All,

Wondering if DMVPN can be configured with radius authentication.

If yes, can you please point me to some example configurations?

Thanks!

[Javier Portuguez]

Hi Ruterford,

There is a way (even though I do not recommend it):

Configuring IKE Shared Secret Using AAA Server

However this feature is only supported in aggresive mode which means that the pre-shared-key will be exchanged across an unprotected connection, this means that the key will be compromissed.

I would recommend to you to use PKI instead or Flex VPN.

http://www.m00nie.com/2011/11/dmvpn-with-pki-authentication-gns3-lab/

PKI Service for Large Scale IPSec Aggregation

Example: Configuring the FlexVPN Server to Authenticate Peers Using EAP ---> Flex VPN

What is Flex VPN?

HTH.

Portu.

Please rate any helpful posts