Site to Site VPN with certificate authentication using ASA as LOCAL CA Server

[Mohammed Islam]

Hi,

As the title suggests I am planning on rolling out site to site VPN using ASA as a local CA Server.

I  have been looking around on the forums and cisco.com but cannot see any  form of documentation on using the ASA as the local CA for site to  site.

Is this possible?  If so can someone point me in the right direction please.

Many thanks.

Regards

Mo

[Marcin Latosiewicz]

Mohammed,

It might be possible (in term of getting the actual certificate auth to work), however Cisco will not support this deployment. Local CA was meant only for SSLVPN remote access, nothing in IPsec is officially supported.

Marcin

[Mohammed Islam]

Cool, but I just need to know whether anyone has configured it successfully.

Not really concerned whether Cisco supports it or not...if that makes sense!

Do you know/heard if this is possible at all?

Thanks.