Hello, First time poster. I have recently configured an ASA to accept vpn connections using L2TP. It works fine with Pre-shared key and local authentication as well PSK and Radius backend.
I am now trying to use digital certificates for the IKE peer using the ASA as a local ca for testing purposes but will more than likley migrate the CA to a third party.
I have enabled the Local Ca, created the Identity Certificate was able issue my host vpnuser certificate from the ASA.
On my windows client i have Type of VPN set to: L2TP/IPSEC under advanced i have use certificate for authentication
with Data encryption set to require encryption. and my Authentication set Use EAP Microsoft: smart card or certificate.
when i try to connect i get IP=xxx.xxx.xxx.xxx, Error processing payload: Payload ID:1
If i switch it back to PSK it works fine.
This is my first time diving in to digital certificates so any help would be appreciated
