crypto identity - this command does not work in any configuration.
who has an example that was fully tested - the TAC example does not work and is the opposite of the command reference. the syntax is not clear, rarely the IOS accepts the DN with commas, if the DN is written in seperate lines the check in Phase 2 fails.
