networkology.net
Site-to-Site VPN using PKI (CCIE Notes)
Points to remember; 1) peer-id-validate Either disable this under tunnel-group (nocheck). OR Send correct identity information from peers (crypto isakmp identity dn) 2) Using trustpoint In ASA, Tru…