How to implement L2TP/IPsec (RSA) on Cisco?

Question

VPN

when deploying L2TP over IPsec on Cisco, you must specify a pre-shared key for the client.
Is it possible to avoid this by presenting a certificate to the client, for example, from GeoTrust, and teaching the server to accept any client certificates?

Answer 1

you must specify a pre-shared key for the client

The default authentication type when creating an ISAKMP policy is by certificates ( authentication rsig|rsa-sig). How-to on the Internet - thousands.
PS Present ≠ issue.