Cisco OL-4015-08 User Manual page 234

Create Easy VPN Remote
User Authentication (XAuth)
Caution
Interfaces
Cisco Router and Security Device Manager Version 2.2 User's Guide
9-80
User authentication (XAuth) appears in this window if the Cisco IOS image on
the router supports Easy VPN Remote Phase III. If user authentication does not
appear, it must be set from the router command-line interface.
Choose one of these ways to enter the XAuth username and password:
Manually in a web browser window
•
The web browser option appears only if supported by the Cisco IOS
Note
image on your router.
Manually from the command line or SDM
•
Automatically by saving the username and password on the router
•
The Easy VPN server may use
allows the save password option, you can eliminate the need to enter the
username and password each time the Easy VPN tunnel is established by this
option. Enter the username and password provided by the Easy VPN server
administrator, and then reenter the password to confirm its accuracy. The
information is saved in the router configuration file and used each time the
tunnel is established.
Storing the XAuth username and password in router memory creates a security
risk, because anyone who has access to the router configuration can obtain this
information. If you do not want this information stored on the router, do not enter
it here. The Easy VPN server will simply challenge the router for the username
and password each time the connection is established. Additionally, SDM cannot
itself determine whether the Easy VPN server allows the save password option.
You must determine whether the server allows this option. If the server does not
allow this option, you should not create a security risk by entering the information
here.
In this window, you specify the interfaces that will be used in the Easy VPN
configuration.
Chapter 9
XAuth to authenticate the router. If the server
Easy VPN Remote
OL-4015-08