Juniper IP SERVICES - CONFIGURATION GUIDE V 11.1.X, Configuration Manual

Page: 269 / 366

■
For information about the format of an RSA public key, see “Public Key Format”
on page 221
.
■
Example
host1# show ipsec key mypubkey rsa
30819f30 0d06092a 864886f7 0d010101 05000381 8d003081 89028181 009cfbde
a16cf72c 49fbd3c1 10d5d9d4 8ba15ec0 9adcb19e 18d488f8 e0370c51 2d10e751
ddd81be4 dfc78aad 9deb797f b2c51172 18967cfb e18f6efa 69285fef 10337527
78ca6bbc 907abb9e 44b12713 ab70cb0e a86d9c6c 80c99bd1 e2bf6b70 91222295
616a88bb cc479e15 be04f3a5 a6160645 844598c3 314b66af 3a8b7602 ed020301
0001
■
See show ipsec key mypubkey rsa.
show ipsec key pubkey-chain rsa
■
Use to display a 1024-bit or 2048-bit ISAKMP/IKE public key that a remote peer
uses for RSA authentication.
■
To display a brief summary of the remote peers for which public keys are
configured on the router, use the
summary keyword.
■
To display the public key for a remote peer with a specific IP address, use the
address keyword followed by the IP address, in 32-bit dotted decimal format.
■
To display the public key for a remote peer with a specific identity, use the name
keyword followed by either:
■
The fully qualified domain name (FQDN)
■
The FQDN preceded by an optional user @ specification; this is also referred
to as user FQDN format
■
The FQDN and user FQDN identifiers are case-sensitive and must exactly match
the identifier specified in the
ipsec key pubkey-chain rsa command. For
example, a public key for user FQDN mjones@sales.company_abc.com does
not match a public key for FQDN sales.company_abc.com.
■
For information about the format of an RSA public key, see “Public Key Format”
on page 221
.
■
Field descriptions
■
Remote Peer—IP address, FQDN, or user FQDN identifier of the remote peer
for which the peer public key can be used
■
Key Type—Type of remote peer identifier: ip address (if IP address is
specified) or identity (if FQDN or user FQDN is specified)
■
Example 1—Displays a summary of the remote peers for which peer public keys
are configured
host1# show ipsec key pubkey-chain rsa summary
Remote Peer Key Type
----------------------------- ----------
192.168.32.3 ip address
grp003.cust535.isp.net identity
tsmith@grp003.cust535.isp.net identity
Monitoring Digital Certificates and Public Keys
■ 243
Chapter 8: Configuring Digital Certificates