Ios ipsec dialup VPN, main mode

[Grant Drage]

Hi,

Was wondering if anyone had an example config for an ipsec dialup VPN in Main mode.

We currently have a VPN for remote workers which is in aggressive mode, however penetration testers have flagged we should change this to main mode.

This is to be configured on a Cisco 2911 ios router, and we do have security licence for the necessary features.

Any help gladly appreciated. Thank you in advance.

[Philip D'Ath]

I believe main mode is the default mode used.

[Philip D'Ath]

If you just want a clean penetration test report, it might be easier to buy AnyConnect SSL VPN licences for your 2911, and change over to using SSL VPN (with Cisco AnyConnect).

As a bonus, AnyConnect works with Windows 10, and their are mobile clients.