Urgent - quick PIX/VPN question

[monkeyboy]

Hello, could anyone tell me please if you can use both digital certificates and also preshared keys on a PIX going to different sites via VPN?

We are using a PIX 525 v7 our end and need to connect to a new site via certificates but we already use pre-shared keys for our vpn authentication.

Many thanks

[5220]

Hi,

You can use digital certificates and preshared, with no problems.

You only need to create another isakmp policy sequence, with authentication rsa-sig (the default) and another crypto map sequence.

Plus generation of certificates and authentication to CA.

Please rate if this helped.

Regards,

Daniel