GNS3 Topology: Certificate Base Remote Access IPSec VPN

This video shows that the configuration steps of ASA to accept remote access IPSec VPN client using certificates. Before I started, I installed active directory, IIS, Certificate services and SCEP on windows server. Active directory is optional of course, you can simply install standalone CA. I wish I could have shown more detailed windows configuration, but unfortunately my computer is not powerful enough to run server and recording software together. Other steps of remote access vpn configuration, like split tunneling or transparent NAT is same with classic (pre-shared-key) remote access vpn configuration. Enjoy!

PART 2

GNS3 Topology: Remote Access IPSec VPN

In this video, I tried to configure Remote Access IPSec VPN through command-line. It is only base configuration to establish a tunnel between ASA and Cisco VPN client. When I have time, I will continue where I left off. Actually in the next video I am gonna add NAT 0 rule and configure NAT on routers (to show ipsec-over-tcp), vpn filter, and Client U turn.

PART 1

PART 2

PART 3

I was thinking that I could attach initial configurations as a txt file. But I couldn't. So, what I configured on ASA and routers before recording the video is only some ip addresses and default routes to provide ip connectivity.