Site to site VPN IPSec authentication

[pcfreak49]

I have a problem with site to site IPSec VPN tunnel if I want a digital certificate authentication, how can you configure ?

[andrew.prince]

Check out the below config example

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080aa5be1.shtml

[pcfreak49]

because it is sometimes possible only between two routers do

[rohaverm]

Cert Auhtentication for IPsec on IOS, you may check this link,

http://www.cisco.com/en/US/partner/docs/solutions/Enterprise/Security/DCertPKI.html. Though they have considered

Router as CA server you would want to use "enrollment terminal" in case of third party CA.

RV

[pcfreak49]

If I click on the link I get this URL http code 403 is correct?

[Marvin Rhoads]

Rohan posted a partner link. The following should be publicly accessible:

http://www.cisco.com/en/US/docs/solutions/Enterprise/Security/DCertPKI.html

You can set this up quite easily using the wizard in Cisco Configuration Professional.

[pcfreak49]

I geconfigureert but that the other router receives no digital certificate?

[rohaverm]

What do you see in the ISAKMP and IPSec debugs of the router which is not receiving the Certificate?

[pcfreak49]

is that possible to do that because the two routers have only 2