When using Cisco Easy VPN, what are the three options for entering an XAUTH username and
password for establishing a VPN connection from the Cisco Easy VPN remote router? (Choose
three.)
A.
using an external AAA server
B.
entering the information via the router crypto ipsec client ezvpn connect CLI command in
privileged EXEC mode
C.
using the router local user database
D.
entering the information from the PC via a browser
E.
storing the XAUTH credentials in the router configuration file
Explanation:
Begin by configuring the local network AAA authorization list with the aaa authorization network
command.
This will tell the router to use only the locally configured user database on the router for its
authorization resource.
C
If XAUTH is being used, it must be decided where to store the authentication credentials:
Store the XAUTH username and password in the configuration file on the router: This option is
typically used if the router is shared between many PCs and the goal is to have the VPN tunnel up
all the time.
E
Do not store the XAUTH username and password on the router: If this option is used, a PC user
who is connected to the router is presented with a web page that allows the username and
password to be manually entered.
D
EZVPN Remote connection profile using the crypto ipsec client ezvpn command
Use the group command to specify the group name and group password to authenticate to the
EZVPN Server as a part of a group.
Use the username command to specify the stored username and password used to provide
additional authentication using XAUTH.
B