Cisco CCNA (640-553) Security Training

 

Using the “aaa authentication auto (WebVPN) command

 

By Charles Ross CCNA - CCNP #CSCO10444244

 

In today’s article, I’m going to talk about the “aaa authentication auto” command being used in webvpn context configuration mode. 

 

Now, if you want to allow automatic authentication for Secure Socket Layer Virtual Private Network (SSL VPN) users, then use the “aaa authentication auto” in webvpn context configuration mode. 

 

In other words, network administrators (like you) use the command to allow users to provide their usernames and passwords credentials via the gateway page URL. So, the users do not have to enter their usernames and passwords again from within the login page. 

 

Below is an example of a user entering a gateway URL:

 

Example: http://<gateway-address>/<vw_context>/webvpnauth?username:password 

 

As you can see, the user’s username and password are added on the end of the URL.

 

And, below are the syntax and an example of the command:

 

Syntax: aaa authentication auto

 

Example: Router#configure terminal

Router(config)#webvpn context

Router(config-webvpn-context)#aaa authentication auto

Router(config-webvpn-context)#end

Router#copy run start

 

As you can see, the router is in webvpn context configuration mode when the “aaa authentication auto” command is being used.

 

To disable automatic authentication, just type the word “no” in front of the command like you see below:

 

Router(config-webvpn-context)#no aaa authentication auto

 

Remember, in order for you to use the “aaa authentication auto” command in webvpn context configuration mode; your router(s) must be running Cisco IOS 12.4(20)T or higher.

 

I hope this article was very informative and helped you quickly understand the usage of the aaa authentication auto (WebVPN) command. If you need to learn more; I suggest you visit my website, (www.ccnaittechtips.com) were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

 

To your success,

 

Charles Ross

CCNA- CCNP #CSCO10444244

http://www.ccnaittechtips.com