IKEv2 to commercial VPN with certificate

[leechap]

I'm new to working with VPN's and would like to connect to a commercial VPN if possible through IKEv2 on a ISR891 router.

Nord VPN provide a certificate file (https://downloads.nordvpn.com/certificates/root.der - from their instructions: https://nordvpn.com/tutorials/linux/ikev2ipsec/), but I haven't been able to find any guidance on the usual Cisco websites in configuring a IKEv2 VPN using an externally provided certificate.

My setup is very simple - the ISR Router connects to the internet via an ISP router, and clients connect to the router through the built-in switch.

Can anyone provide some guidance or point me towards existing guidance, if this is possible at all?

Many thanks in advance - Lee.

[Dennis Mink]

check this existing post, that should help you on the way:

https://supportforums.cisco.com/t5/vpn/ikev2-with-certificates/td-p/2087717

[leechap]

Thanks Dennis,

This is really helpful... although, it's quite over my head without any context.  I think I'd be OK if I could find some guidance that would help me to understand how this applies when setting my router up as a client to a 3rd party VPN.  I don't suppose you could recommend any further reading?

Thanks again