VPN + RADIUS EAP-TLS

[topsecret]

Hi all,

Could you tell me whether it is possible to use EAP-TLS and RADIUS (FreeRADIUS) to authenticate users connecting to VPN by Cisco VPN Client?

Thanks all

[Marcin Latosiewicz]

Antonio,

VPN client supports only mode-config/xauth since (at least today) IKEv1 and not IKEv2.

That being said it will talk modeconfig to headend and it's the headend checking authentication with radius server.

Marcin

[ROBERTO TACCON]

Hello,

as IPSec solution check also the new SSL + IPSec client (available for Cisco IOS and Cisco ASA):

Cisco AnyConnect 3.0

(needed license fee: AnyConnect Essentials)

(client available also for Apple iPhone-iTablet and for Samsung new 8.9 and 10 Android Tablet: needed also AnyConnect Mobile license )

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/qa_c67-622477_ns1049_Networking_Solutions_Q_and_A.html

• IPsec/IKEv2 offers an optimized connection for latency-sensitive traffic when security policies require use of IPsec

if the VPN IPSec solution is for the Cisco firewall ASA check akso the follwing docs:

ASA 8.x Dynamic Access Policies (DAP) Deployment Guide

http://www.cisco.com/en/US/products/ps6120/products_white_paper09186a00809fcf38.shtml

ASA/PIX 8.x: Radius Authorization (ACS) for Network Access using Downloadable ACL with CLI and ASDM Configuration Example

http://www.cisco.com/en/US/partner/products/ps6120/products_configuration_example09186a0080a9eddc.shtml

HTH

Roberto Taccon