IKE authentication method?

[adisegna]

I currently use my PIX as a VPN endpoint using Radius (Windows 2000 Server) and pre-shared keys. The possibility exists for more users to access the VPN services. I would like to do away with the pre-shared keys. Can someone point me in the right documentation direction? I currently have a Window cert server online and would like to have the PIX get a certificate from there.

Thanks in advance.

[nefkensp]

Hello,

There is a configuration example on CCO that tells you how to use the VPN Client and a PIX with certificates as authentication:

http://www.cisco.com/en/US/customer/tech/tk583/tk372/technologies_configuration_example09186a0080094e69.shtml

It also explains how to use smartcards to store the certificate and how to enroll the pix into the CA.

Hope this helps,

P-J Nefkens