I am looking to migrate our current Client VPN connection that is using IKEv1 in Aggressive Mode over to IKEv2. We currently have the connection going through a 4000 series ISR. Currently we have the router configured with the normal ISAKMP based configurations and it seems that I would need to change these over to the IKEv2 based configuration, similar to what I am using for my Site-to-Site connections.
Currently we are using pre-shared keys and trying to figure what is required to convert this connection over to IKEv2/IPSEC. I have read from a few different sources that certificates might need to be involved for the connection and the example used the local router as the site's CA. If we did this, we already have a Microsoft CA server that we could generate the certificates.
Does anyone know of any documentation (I have been researching for almost 2 hours now) on the configuration on the Cisco 4000 series ISR so I can convert our client connection from IKEv1/ISAKMP to IKEv2/IPSec connections?
