topic Site to Site VPN with certificate authentication using ASA as LO in Network Security

Site to Site VPN with certificate authentication using ASA as LOCAL CA Server

Mohammed Islam — Mon, 11 Mar 2019 22:01:31 GMT

Hi,

As the title suggests I am planning on rolling out site to site VPN using ASA as a local CA Server.

I have been looking around on the forums and cisco.com but cannot see any form of documentation on using the ASA as the local CA for site to site.

Is this possible? If so can someone point me in the right direction please.

Many thanks.

Regards

Site to Site VPN with certificate authentication using ASA as LO

Maykol Rojas — Wed, 14 Dec 2011 04:03:47 GMT

Hi,

Nope, as far as I know, the CA server capability is only on IOS software, not on the ASA.

Mike.

Site to Site VPN with certificate authentication using ASA as LO

Mohammed Islam — Wed, 14 Dec 2011 09:29:31 GMT

No, the ASA does allow creation of CA server, but from what I've read online it only supports client based and web based VPN (IPSEC and SSL). There is no mention about site to site IPSEC.

FYI, I have created CA locally on the ASA previously and it does support it 100%.

Site to Site VPN with certificate authentication using ASA as LO

Maykol Rojas — Wed, 14 Dec 2011 16:44:30 GMT

New stuff

But why it does not work for site to site? I mean if both peers are able to get a certificate from the ASA I dont know what could go wrong creating the tunnel.

Let me know.

Mike