cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
357
Views
0
Helpful
1
Replies
acleri
Beginner

DMVPN/S2S VPN With XAUTH?

I'm trying to work up a DMVPN solution, I'm not crazy about a PSK for all the sites.  I'd like to work with RADIUS and XAUTH in order to let me disable a remote S2S VPN simply disabling a specific users on the radius.

Is it supported?

1 REPLY 1
olpeleri
Cisco Employee

It may work using network authorization with the following huge drawback. U will have to use aggressive mode [ meaning exchange the preshared key hash unencrypted]...

If you wanna do it securely U can do it using ikev2 flexvpn [ Then you can store the psk on the radius AND even use EAP to authenticate the remote site]

Content for Community-Ad