L2TP through PIX 515 6.2 to 2k3

[attrib7575]

Does the PIX 515 ver. 6.2 support L2TP, IPSEC certificates through itself to a 2k3 server?

[tstanik]

Yes, PIX 515 ver. 6.2 does support L2TP, IPSEC certificates. Following link may help you

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800942ad.shtml

[attrib7575]

I believe that example is for tunneling to the pix, I need to tunnel through the pix and authenticate to a Microsoft CA without the pix being involved in the authentication. Is this possible? I've allowed traffic on isakmp, esp, NAT T, 1701, but the isakmp negotiation never completes. The tunnel works from an XP client to the CA within the lan as a test, but not from theoutside coming in through the pix.