Cisco site to site VPN with digital certificates authentication (IOS based Certificate Authority).

This is a basic configuration of Cisco IOS based CA for handing out self signed certificates to VPN peers. Please note that prior to setting up CA server, all the routers need to be synched up with a NTP server. otherwise certificates get a wrong timestamp and could cause the VPN peering to fail. Hope this has been helpful and thank you.