FlexVPN for anyconnect remote access with local authentification

[ngtransge]

Hello,

I am interesting if it is possible to configure ISR 1941 Router as FlexVPN Server, with simple local user/password authentication, without certificate and external RADIUS server and connect with AnyConnect VPN client. Can you provide configuration templates for this kind of configuration ?

Thank you,

[Graham Bartlett]

Hi

To answer your question bluntly, but 'no', for username/password (EAP) authentication a certificate is required for the headend (as mandated by the IKEv2 RFC).

There's a feature request for IOS to act as a RADIUS device, but i've seen no traction on this since I raised it..

Sorry.

Maybe you could look at using certificates and the 1941 as the CA ?

cheers

[Jacob Zartmann]

Hi,

I'm looking into this:

https://www.cisco.com/c/en/us/support/docs/security/flexvpn/200555-FlexVPN-AnyConnect-IKEv2-Remote-Access.html#anc6

But no "luck" getting it to work.

[Calob]

im facing the same issue, i have no idea why this is not working.