IPSEC Certificate

[Bad boy Warrior]

In a test environment i have 3 PCs and 1 domain controller running WS2008 (1 PC with XP 2 with Vista).

After reading about IPSEC i understand that you can use a certificate internally (PC to PC and Domain to PC - i think) to authenticate domains and PCs. So wondering has anyone done this and how does this interact with users browsing the web and RDP in and out of the system (internally and externally)?

Finally is there a test certificate i could create? Im a little rusty in this area so feel free to correct me if im wrong or misunderstood something.

Cheers