IntroductionFlexVPN AAA-Based Pre-Shared KeysConfiguration on the Branch-1 RouterConfiguration on the Branch-2 RouterConfiguration on the Hub RouterConfiguration on the RADIUS ServerFlexVPN User and Group AuthorizationFlexVPN Client Configuration at Branch 1FlexVPN Client Configuration at Branch 2Configuration on the FlexVPN ServerConfiguration on the RADIUS ServerLogs Specific to FlexVPN Client-1Logs Specific to FlexVPN Client-2FlexVPN Routing, Dual Stack, and Tunnel Mode AutoFlexVPN Spoke Configuration at Branch-1FlexVPN Spoke Configuration at Branch-2FlexVPN Hub Configuration at the HQVerification on FlexVPN Spoke at Branch-1Verification on FlexVPN Spoke at Branch-2Verification on the FlexVPN Hub at HQFlexVPN Client NAT to the Server-Assigned IP AddressConfiguration on the FlexVPN ClientVerification on the FlexVPN ClientFlexVPN WAN Resiliency, Using Dynamic Tunnel SourceFlexVPN Client Configuration on the Dual-Homed Branch RouterVerification on the FlexVPN ClientFlexVPN Hub Resiliency, Using Backup PeersFlexVPN Client Configuration on the Branch RouterVerification on the FlexVPN ClientFlexVPN Backup Tunnel, Using Track-Based Tunnel ActivationVerification on the FlexVPN ClientSummary