IKEv2 Certificate authentication

[GeneticOne]

Hello all,

Is it possible to create two VPN Sessions with one Certificate (Private Key, Public Key)?

The ASA has his own Certificate and can Authenticate the other two but currently only one of the other peers can connect. If the otherone tries to establish a connection the first one will be deleted and the ASA creates a new one.

Both IPSec Gateways have there own Connection Profile but are using the same Certificate.

Is this behaviour specified in one of the RFCs to IKEv2 or Certificate authentication?

[Shakti Kumar · Accepted solution]

Hi,

That is correct, we currently look into the ID payload to maintain crypto session naturally if the certificate is same the ID payload would be same as well in which case the only 1 user can connect.

Thanks

Shakti

[GeneticOne]

Thank you for the Info :)