Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Configuration Manual

Page: 258 / 366

■
There is no no version. To remove a key pair, use the ipsec key zeroize
command.
■
See ipsec key generate.
ipsec key zeroize
Use to delete RSA key pairs. Include one of the following keywords:
■
■
rsa —Removes the RSA key pair from the router
■
pre-share —Removes all preshared keys from the router
■
all —Removes all keys within the VR context from the router
■
Example
host1(config)# ipsec key zeroize rsa
■
There is no no version.
■
See ipsec key zeroize.
issuer-identifier
■
Use to specify the name of the CA issuer for online digital certificate configuration.
The identifier and the enrollment URL specified by the
enrollment url command
are used together to create the CA authentication requests.
■
Example
host1(config-ca-identity)# issuer-identifier BetaSecurityCorp
■
Use the no version to remove the name from the configuration.
■
See issuer-identifier.
root proxy url
■
Use to specify an HTTP proxy server that can submit HTTP requests on the E
Series router's behalf to retrieve the root CA certificate. Use this command if
your network has an HTTP proxy server installed between the E Series router
and the Internet. Use the format http://
server_ipaddress to specify the URL of the
proxy server.
■
Example
host1(config-ca-identity)# root proxy url http://192.168.5.45
■
Use the no version to remove the root proxy URL from the configuration.
■
See root proxy url.
Configuring Peer Public Keys Without Digital Certificates
During IKE negotiations, peers exchange public keys to authenticate each other's
identity and to ensure that IKE SAs are established with the intended party. Typically,
232 ■
Configuring Peer Public Keys Without Digital Certificates
JUNOSe 11.1.x IP Services Configuration Guide