On Sun, Mar 23, 2014 at 10:36 AM, Rankjie <rankjie at gmail.com> wrote: > Well, after set the cisco-client-compat to true, it's working now. > BTW, how can I use certificate or password auth but not require both? No. As it is now, multiple authentication options, imply that they are all required (and-composition). regards, Nikos