Hi all The "match certificate" is available in ISAKMP profile and trustpoints for IOS. If you were asked to restrict certificates for specific DN parameter for site to site VPN ISAKMP authentication, would you configure the"match certificate" in the ISAKMP profile or in the trustpoint?
With regards Kings
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
