Site to Client Vpn using Cisco Pix with Microsoft CA

[kjanakiraman]

Can some one tell me how to configure the site to client vpn with microsoft CA? Is there any good document available which helps in configuring the same? I tried to search in the web i could not find one. I will be using windows 2003 as my CA and it will be standalone root CA. Should i download any files and install in the windows 2003 CA?

Please advice me how i should proceed in this regard

Thanks in Advance

[drolemc]

The document 'IPSec Between PIX and Cisco VPN Client Using Smartcard Certificates Configuration Example' should help. It is located at http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a0080094e69.shtml. For additional examples, you could refer to the support page for PIX and IPSec.

PIX support page: http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Hardware:PIX&viewall=true

IPSec support page: http://www.cisco.com/pcgi-bin/Support/browse/psp_view.pl?p=Internetworking:IPSec&s=Implementation_and_Configuration

[milan.kulik]

Yes,

you need to instal SCEP support into your MS CA.

See http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.eeacdce/4#selected_message

If you follow the complete therad, you can see my long-term fight with MS Enterprise CA. Finally, I gave up and installed a new standalone root CA.

I was told by a TAC engineer later to use Cisco CA available even in low-end (1700) routers.

It should work fine without many problems caused by MS/Cisco incomaptibility.

Regards,

Milan