cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
259
Views
0
Helpful
2
Replies

VPN on PIX 515E - IKE Xauth for Crypto Map

pizzov
Level 1
Level 1

I am trying to setup a new VPN group on a PIX running 6.2(2) code. I would like to use the "LOCAL" database for usernames for my VPN IDs/Passwords. When I enter the command:

"crypto map outside_map client authentication LOCAL" ...I receive an error:

"Protocol "local" is available only for console authentication and command authorization"

Is this because of the older version of PIX code, or something else I'm doing wrong? Thank you!!!!!

2 Replies 2

jstrine
Level 1
Level 1

I believe it is because of the PIX OS version. Verision 6.3 introduced the ability to use a LOCAL authentication server for VPN access. See the 6.3(1) release notes below:

http://www.cisco.com/en/US/customer/products/sw/secursw/ps2120/prod_release_note09186a0080579fbf.html#wp65210

angel.batista
Level 1
Level 1

try using "crypto map outside_map client authentication local" (lower case)