NOTE A Cisco 3000 Series VPN Concentrator used as an Easy VPN Server performs
proxy authentication to the AAA server. The Easy VPN Remote device sends each
authentication request to the Cisco 3000 Series VPN Concentrator instead of directly to
the AAA server.To enable IUA, you use the following command on the Easy VPN Server:
vpngroup groupname user-authentication
groupname is the alphanumeric identifier for the VPN group for which you want to
enable IUA.
You also must use the following command on the Easy VPN Server to specify the AAA server
to use for authentication:
vpngroup groupname authentication-server server-tag
The server-tag identifies the AAA server to use for the specified VPN group.
To specify the length of time that the VPN tunnel will remain open without any user activity,
you use the following command on the Easy VPN Server:
vpngroup groupname user-idle-timeout seconds
You specify the idle time for the specified VPN group in seconds.