To deploy a PPTP-based, site-to-site VPN solution, you first create a certificate infrastructure to issue user certificates to calling routers and to issue computer certificates to your authenticating server computers (if you are using EAP-TLS authentication). Then deploy your AAA infrastructure (including RADIUS servers), modify your intranet infrastructure to accommodate intersite routing, and configure and deploy your calling and answering VPN routers.
To deploy an L2TP/IPSec-based, site-to-site VPN solution, you first create a certificate infrastructure to issue computer certificates to both your calling and answering routers. Then deploy your AAA infrastructure (including RADIUS servers), modify your intranet infrastructure to accommodate intersite routing, and configure and deploy your calling and answering VPN routers.