Enterasys Networks XSR CLI PKI commands, CA Identity Mode Commands crypto ca identity

PKI commands
14-84 Configuring the VPN
•“CryptoMapModeCommands”onpage 14‐110.
•“CryptoTransformModeCommands”onpage 14‐115.
•“CryptoShowCommands”onpage 14‐118.
•“InterfaceCLICommands”onpage 14‐121.
•“InterfaceVPNCommands”onpage 14‐122.
•“TunnelCommands”onpage 14‐127.
•“TunnelClearandShowCommands”onpage 14‐132.
•“AdditionalTunnelTerminationCommands”onpage 14‐134.
•“DFBitCommands”onpage 14‐137.
PKI commands
ThefollowingcommandsconfigurePublicKeyInfrastructure(PKI)ontheXSR.
CA Identity Mode Commands
crypto ca identity
ThiscommanddeclarestheCertificateAuthority(CA)theXSRshoulduseandidentifiesCAs
whichmayberequiredaspartoftheCAchainfortherouterorapeerIPSecclient.Ifyou
previously���declaredtheCAandjustwanttoupdateitscharacteristics,specifythenameyou
previouslycreated.Insomecases,theCAmightrequireaparticularCAname,suchasitsdomain
name.
PerformingthiscommandacquiresCAIdentitymode,whereyoucanspecifyCAcharacteristics
withthefollowingsub‐commands:
•crl frequency‐SpecifiestheintervalbetweenCertificateRevocationList(CRL)retrievals
andothermaintenancethatmaybeperformedperiodically.Refertopage14‐85forthe
commanddefinition.
•enrollment http-proxy‐SpecifiesthelocalHTTPproxyserver.Itisoptional.Refertopage
14‐86forthecommanddefinition.
•enrollment retry count ‐SpecifieshowmanycertificateenrollmentpollstheXSRwill
sendbeforegivingup.Itisdefaulted.Refertopage14‐86forthecommanddefinition.
•enrollment retry period‐SpecifiesanintervalthattheXSRshouldwaitbetweensending
certificaterequestretries.Itisdefaulted.Refertopage14‐87forthecommanddefinition.
•enrollment url‐SpecifiestheURLoftheCAandisalwaysrequired.Refertopage14‐88for
thecommanddefinition.
Syntax
crypto ca identity name
Note: AAA commands are described in Chapter 13: Configuring Security.