In the previous section, we configured an IPsec tunnel in which authentication is done though either a PSK or certificates. This is acceptable for connecting two routers, but what if there are multiple mobile clients? In such scenarios, it makes sense to configure settings for each individual user, and we can do that via the Mobile Clients tab.
The first option on the Mobile Clients tab is the IKE Extensions checkbox. If checked, IPsec mobile client support will be enabled. The next section is Extended Authentication (Xauth). The User Authentication listbox allows you to choose ...