Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

ISAKMP

Status
Not open for further replies.
dayhawk

dayhawk

IS-IT--Management
Jan 29, 2004
41
US
What does "no-xauth no-config-mode" actually do when added to the end of an ISAKMP line?
 
Sort by date Sort by votes
This command is used for VPN Clients to push configuration and extended authentication down to them. It is not used in Lan to Lan connections so can be disabled to speed up the tunnel establishment.
 
Upvote 0 Downvote
Sorry - should have said this command disables the PIX trying to send the config and extended authentication down to VPN CLients, it can be disabled by issuing the "no-config-mode no-xauth which can speed up tunnel establishment for Lan to Lan VPNs.
 
Upvote 0 Downvote
so it is best to use it in lan-to-lan configs? when you say it sends the config, what exactly do you mean? not my whole pix config right? what exactly is extended authentication?

Thanks for all your help.
 
Upvote 0 Downvote
Status
Not open for further replies.

Similar threads

HungryHouse
  • Locked
  • Question
ASA VPN Tunnel Duplicate Phase1 ISAKMP SA
Replies
0
Views
57
HungryHouse
HungryHouse
NetEng22
  • Locked
  • Question
Clear crypto isakmp
Replies
1
Views
55
joaott
joaott
dunks59
  • Locked
  • Question
ISAKMP error?
Replies
1
Views
27
brianinms
brianinms
North323
  • Locked
  • Question
crypto isakmp nat-traversal 120 1
Replies
5
Views
34
Staticfactory
Staticfactory
StaplesMan
  • Locked
  • Question
Missing Crypto ISAKMP 1
Replies
2
Views
50
StaplesMan
StaplesMan

Part and Inventory Search

Sponsor

Back
Top