XAUTH is in my perception for authentication of users, (local) escpecially radius or tacacs.
So what we do at the hub site for a static IKE peer is disable XAUTH, so that a spoke router does not get an auth prompt, or the hub does not wait for it. So I think the HUb is waiting for an answer, maybe used to authenticate VPN users only. WHAT DID YOU PUT AT THE SCREEN IKE PROPOSALS? You need Preshareds keys there! 8. The following example shows the various policies used in the IKE policy named "CiscoVPNClient-3DES-MD". In this policy, Preshared Keys(XAUTH) for Authentication Mode is being used so that the client will be prompted to supply a username and password at the end of IKE negotiations. http://www.cisco.com/en/US/products/sw/secursw/ps2276/products_configuration _example09186a008010edf4.shtml#task2_steps Martijn -----Oorspronkelijk bericht----- Van: suaveguru [mailto:[EMAIL PROTECTED] Verzonden: donderdag 7 augustus 2003 9:40 Aan: Jansen, M Onderwerp: RE: Strange VPN problem [7:73641] thanks for your prompt reply , but I am using easyvpn configuration for cisco 805 router to concentrator 3005 with the cisco 805 as client mode and concentrator as hub . I can't find the line that you indicate for my cisco 805 , could it be easyvpn configuration that i am using? suaveguru --- [EMAIL PROTECTED] wrote: > Guru. > > Type the no-xauth behind the key-mapping. > > > > isakmp key **NEWKEYNEWCUSTO** address x.x.x.x > netmask 255.255.255.255 > no-xauth no-config-mode > > > > Martijn > > > -----Oorspronkelijk bericht----- > Van: suaveguru [mailto:[EMAIL PROTECTED] > Verzonden: donderdag 7 augustus 2003 7:08 > Aan: [EMAIL PROTECTED] > Onderwerp: Strange VPN problem [7:73641] > > > hi all, > > I am trying to setup a easy VPN solution for a cisco > 837 to a cisco VPN concentrator 3005 using network > extension mode but I keep getting this error msg > "Aug > 7 13:08:16.571: EZVPN(mendelvpn): Pending XAuth > Request, Please enter the following command: > Aug 7 13:08:16.571: EZVPN: crypto ipsec client > ezvpn > xauth" > > Any form of input will be appreciated > > suaveguru > > __________________________________ > Do you Yahoo!? > Yahoo! SiteBuilder - Free, easy-to-use web site > design software > http://sitebuilder.yahoo.com > **Please support GroupStudy by purchasing from the > GroupStudy Store: > http://shop.groupstudy.com > FAQ, list archives, and subscription info: > http://www.groupstudy.com/list/cisco.html __________________________________ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=73648&t=73641 -------------------------------------------------- **Please support GroupStudy by purchasing from the GroupStudy Store: http://shop.groupstudy.com FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
