IP SEC VPN CLIENT FOR ISR 4000

[rikelme10]

Hi

I have a ISR 4331 with security license, I configured IPSec for remote VPN user in the ISR, but I found that the client VPN is EOL, Can I use a third Party VPN Client? or what alternative can I use?

[GioGonza · Accepted solution]

Hello @rikelme10,

Yes, you can use any other VPN client with the connection, you can use Shrew Soft. In the other hand you can use the Cisco Legacy VPN Client even though that´s EOL.

HTH

Gio

[Karsten Iwen]

If you want to stay on a Cisco supported way, AnyConnect with an IPSec/IKEv2 setup is the way to go.

[rikelme10]

Can I get the Anyconnect App free or what kind of license of Anyconnect I need for that setup?



Regards

[Karsten Iwen · Accepted solution]

No, you need an AnyConnect Plus license:

https://www.cisco.com/c/dam/en/us/products/collateral/security/anyconnect-og.pdf

[diflyon]

Is it possible to run AnyConnect with ISR 4000 IPSec/IKEv2 without AnyConnect Plus license activation?

[Karsten Iwen]

If you want to use the AnyConnect Client,  you need the AnyConnect Plus License, also for VPN-gateways other than the ASA.

[cflax]

Hi there,

I know it's an old topic but did you manage to get  IPSEC VPN to work on the 4300 ISR

I'm facing problems with ISR 4321 and I'm using the EOL Client.

I also tried Shrew soft client

What's the IOS version you have on the ISR if I may ask?

Thank you.

[diflyon]

Check this guide if you want to use Certificates https://www.cisco.com/c/en/us/support/docs/security/flexvpn/115014-flexvpn-guide-cert-00.html

If you want to use logins with ACS https://www.cisco.com/c/en/us/support/docs/security/flexvpn/115755-flexvpn-ike-eap-00.html

If you want to use logins with MS ActiveDirectory https://www.cisco.com/c/en/us/support/docs/security/flexvpn/115941-flexvpn-ikev2-config-00.html