where can i find the CA script location for PIX to access a CA?

[tkpsimon]

I'm trying to setup L2TP/IPSec to PIX connection, the example suggest to use CA for client authentication.

1) is it necassary to use CA for L2TP/IPSec connection?

2) if so, i have already setup a CA server, what is the CA script location which i could put inside the PIX configuration?

anyone?

[vijkrish]

http://www.cisco.com/warp/customer/110/l2tp-ipsec.html

shows an example config and a working setup.

Microsoft does not support pre-shared keys in remote access scenarios and so encourages customers to use IPSec and L2TP with certs.

However it is technically possible to have pre-shared keys.

Not many are interested because:

1. Cisco VPN client offers advanced features.

2. It's FREE as long as you have a headend VPN device.