Alcatel-Lucent OmniAccess 700, Cli Configuration Manual

Page: 781 / 1193

IPsec VPN Configuration
Except on the first page, right running head:
Heading1 or Heading1NewPage text (automatic)
755
Alcatel-Lucent
Beta Beta
CLI Configuration Guide
T
O
C
ONFIGURE A
CA I
DENTITY
Note: Entering this command changes the mode to ca-identity mode.
E
XAMPLE
ALU(config)# crypto ca identity ALUCA
T
O
I
MPORT A
CA C
ERTIFICATE
E
XAMPLE
ALU(ca-ALUCA)# import ca-cert ftp:
Note: X.509 certificates received during the IKE negotiation are automatically authenticated
by going up the trust chain until a self-signed root CA certificate is reached.
T
O
C
ONFIGURE THE
S
UBJECT
-
NAME FOR A
C
ERTIFICATE
S
IGNING
R
EQUEST
(CSR)
E
XAMPLE
ALU(ca-ALUCA)# subject-name /CN=Bart Simpson/O=ALU/C=US
Command (in CM) Description
crypto ca identity <name>
This command configures a CA identity
with the name specified.
Command (in CA Identity CM) Description
import ca-cert [ fpkey <file-
path> | ftp: | tftp: | http: | https: |
scp: ]
This command imports a CA certificate.
Note: Currently, SCP option is not
supported.
Command (in CA Identity CM) Description
subject-name < subject-name >
This command specifies the subject
distinguished name that would appear in
the certificate request for this CSR, if
generated on the OA-700.