IPSec Demonstration #2:
Certificate-based Authentication

What we’ve configured…

Creating HOST GROUPS

Identify a SG as a CA

How the Internal CA operates

Example Certificate issued by HOME-SG

Setting IKE Policy for Digital Certificates

Setting IPsec Policy

Putting it all together…

Summary