IPsec with X.509 certs

RouterOS General
1

Hi, does RouterOS (2.9) support X.509 certificates for IPsec authentication?
I’m using RouterBoards to connect to Openswan and shared secrets allow only one road warrior connection.

2

No

Eugene

3

Ok.

Is there any way to attach an id to the MT side, like one can do on Openswan?

I’m looking at an equivalent to this Openswan directive:

leftid=@road.example.com

Or has anyone another kind of setup for connecting MT road warriors to a Freeswan/Openswan gateway?

Thanks.

EDIT: Apparently Openswan can’t handle PSK from multiple RWs. So nevermind :slight_smile: