Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,we do want to establish a Remote Access VPN Cisco VPN Client 3.51 to VPN3005 v.3.51 using certificates.We only got it working when the OU field of the certificate of the Concentrator was matching the OU field of the Client Certificate. If I und...
After some more testing I got it working.I was wrong.The OU field of the Concentrator's certificate does not need to match with the OU name of the client's certificate or with a Group name.Sorry for your time.rgds,- Robert
Hello JAZIB,thanks for your quick reply.I can install max. 2 Identity Certificates on the Concentrator and I was thinking the second one is to provide a smooth migration to a new CA or to install a renewed certificate without interruption. However - ...
It should work if you let a pair of router on the inside with a pair of router on the outside talk BGP with each other and let BGP take care of the failover (PIXes do not run in failover mode). This Failover will obviously not be statefull.
