• Configure IKEv2-based Remote Access – http://technet.microsoft.com/cs-cz/library/ff687731(v=ws.10).aspx

pro fungování je potřeba mít certifikát na serveru, který podporuje:

• Common name (CN): Same as the hostname OR IPv4/v6 address that is configured as VPN destination on the VPN client. i.e. if the VPN client is configured with the hostname, then set this as same hostname OR if the VPN client is configured with the IP address, then set this as same IP address.
• Extended Key Usage (EKU): Select “Server Authentication” and “IP Security IKE intermediate”.
• Key Usage: Select Digital signature and Key encipherment.

viz:

• http://www.carbonwind.net/blog/post/ISA-Server-2006-as-a-VPN-server-and-the-selection-of-the-certificate-to-be-used-for-IKE-authentication-for-L2TPIPsec-connections-e28093-a-possible-work-around.aspx
• http://blogs.technet.com/b/rrasblog/archive/2009/06/10/what-type-of-certificate-to-install-on-the-vpn-server.aspx