VPN Client - Username & Password

[8kpan]

Before an IPSec tunnel is established between the client and the concentrator, how are the user name and password being protected? Are they being sent in clear text?

Please advise.

[o.litschka]

The Username and Password are protected by the ISAKMP session.

[Richard Burts]

The user name and password are not sent until after the Security Association has been established (keys negotiated, security parameters mutually accepted, and encryption started). When the name and password are sent they are encrypted and protected by the SA.

HTH

Rick