Cisco Ccna (640-553) Security Training: Using The Aaa Authentication Auto (webvpn) Command

In today’s article, I’m going to talk about the “aaa authentication auto” command being used in webvpn context configuration mode.

Now, if you want to allow automatic authentication for Secure Socket Layer Virtual Private Network (SSL VPN) users, then use the “aaa authentication auto” in webvpn context configuration mode.

In other words, network administrators (like you) use the command to allow users to provide their usernames and passwords credentials via the gateway page URL. So, the users do not have to enter their usernames and passwords again from within the login page.

Below is an example of a user entering a gateway URL:

Example: http:////webvpnauth?username:password

As you can see, the user’s username and password are added on the end of the URL.

And, below are the syntax and an example of the command:

Syntax: aaa authentication auto

Example: Router#configure terminal
Router(config)#webvpn context
Router(config-webvpn-context)#aaa authentication auto
Router(config-webvpn-context)#end
Router#copy run start

As you can see, the router is in webvpn context configuration mode when the “aaa authentication auto” command is being used.

To disable automatic authentication, just type the word “no” in front of the command like you see below:

Router(config-webvpn-context)#no aaa authentication auto

Remember, in order for you to use the “aaa authentication auto” command in webvpn context configuration mode; your router(s) must be running Cisco IOS 12.4(20)T or higher.

I hope this article was very informative and helped you quickly understand the usage of the aaa authentication auto (WebVPN) command. If you need to learn more; I suggest you visit my website, were you’ll find the latest information regarding the Cisco CCNA (640-553) Security exam techniques.

To your success,

By: Charles E Ross

Article Directory: http://www.articledashboard.com

Charles Ross, CCNP #CSCO10444244 is the owner of Ittechtips.com; where you'll find free comprehensive information and videos on how to pass the CCNA (640-553) security exam. Sign-Up for "100 Free Videos" and, also learn more about the new "Cisco CCNA (640-553) Video Accelerated Training Course" at his website. www.ccnaittechtips.com