Security Internetworking Experts


Post New Topic  Post A Reply
my profile | register | search | faq | forum home
  next oldest topic   next newest topic
» Security Internetworking Experts   » Security   » CCIE Security Lab Forum   » xauth with GRE over IPSec or with DMVPN, possible?

UBBFriend: Email this page to someone!    
Author Topic: xauth with GRE over IPSec or with DMVPN, possible?
sickMonkey
Guru

Member # 19276

Member Rated:
posted February 03, 2012 08:06 AM      Profile for sickMonkey     Send New Private Message      Edit/Delete Post  Reply With Quote 
Like the subject says, I am trying to determine if either or both of these are possible. It seems like I have tried to lab it up before but now I am not finding anything in my notes.

Thanks.

Posts: 133 | From: Denver | Registered: Jun 2006  |  IP: Logged
sickMonkey
Guru

Member # 19276

Member Rated:
posted February 03, 2012 08:11 AM      Profile for sickMonkey     Send New Private Message      Edit/Delete Post  Reply With Quote 
Clarification: I know you can combine the technologies on a router but I want to get xauth to function as a second auth mechanism for the peer routers.

THAT is something I feel is going to be difficult or impossible but a challenge to try.

Posts: 133 | From: Denver | Registered: Jun 2006  |  IP: Logged
Kingsley Charles (CCSP, CCNP, CCIP)
Brainiac

Member # 29872

Member Rated:
posted February 04, 2012 08:48 AM      Profile for Kingsley Charles (CCSP, CCNP, CCIP)     Send New Private Message      Edit/Delete Post  Reply With Quote 
You can but I have never tried it. You can associate an authorization rule to the crypto map.

crypto map cisco isakmp authorization list mylist

http://www.cisco.com/en/US/docs/ios/12_1t/12_1t1/feature/guide/ikessaaa.html

With regards
Kings

Posts: 887 | From: India | Registered: Jun 2010  |  IP: Logged


All times are Eastern Time  
Post New Topic  Post A Reply Close Topic    Move Topic    Delete Topic next oldest topic   next newest topic
Printer-friendly view of this topic
Hop To:


Contact Us | Security Internetworking Experts