How configure the IKE with RSA without CA between 1760 and PIX501 ?

[cjrchoi11]

Hi,

I have a question regards the IKE authentication with RSA-SIG between 1760 router and PIX501 without CA.

.

I found an URL between routers but not for PIX. do I need third party CA(public or in-house) in the PIX ?

http://www.cisco.com/warp/public/707/18.html

.

Please correct me if I'm wrong or URL for reference.

.

Thanks,

[artherrera · Accepted solution]

RSA-enc it's only available for IOS routers, PIX will support certs or preshared keys, you might want to look at this sample with a MS CA :

http://www.cisco.com/warp/public/707/lan_to_lan_ipsec_pix_rtr_cert.html