C613-50170-01 Rev B
Command Reference for x510 Series
1872
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
AAA C
OMMANDS
SERVER
NAME
-
CHECK
server name-check
Overview
This command sets the global behavior for certificate name-checking for the
RadSecProxy AAA application to
on
. This behavior will be used for all servers
associated with the application that do not specify a behavior on a per-server basis.
If name-checking is enabled, the Common Name portion of the subject field of the
client’s X.509 certificate must match the domain name or IP address specified in
the
server (radsecproxy-aaa)
command.
Use the
no
variant of this command to set the global behavior for certificate name
checking to
off
Syntax
server name-check
no server name-check
Default
Certificate name checking is on by default.
Mode
RadSecProxy AAA Configuration Mode
Example
Disable certificate name checking globally with the following command:
awplus#
configure terminal
awplus(config)#
radius-secure-proxy aaa
awplus(config-radsecproxy-aaa)#
no server name-check
Related
Commands