THOMSON SpeedTouch 608, Cli Reference Manual

Page: 255 / 490

253
IPSec Commands
E-DOC-CTC-20040216-0002 v1.0
ipsec cert crlconfig
Show/set Public Key Infrastructure (PKI) Certificate Revocation List (CRL) configuration.
SYNTAX:
where:
ipsec cert crlconfig [checking_enabled = <{disabled|enabled}>]
[use_expired_crls = <disabled|enabled}>]
[dist_point1 = <quoted string>]
[fetch_dynamically = <disabled|enabled}>]
[check_cert_extension = <disabled|enabled}>]
[time_checking = <disabled|enabled}>]
[net_timeout = <number>]
[http_proxy_address = <ip-address>]
[http_proxy_port = <number>]
checking_enabled Enable or disable CRL checking.
The default is
disabled
.
OPTIONAL
use_expired_crls Allow (enabled) or do not allow (disabled) the use of certificates
with expired CRLs.
The default is
disabled
.
OPTIONAL
dist_point1 The Uniform Resource Identifier (URI) to fetch CRLs from. The
URI must contain the IP address of the Light-weight Directory
Access Protocol (LDAP) or the HyperText Transfer
Protocol (HTTP) server. OPTIONAL
fetch_dynamically Enable or disable dynamic retrieval of CRLs.
The default is
disabled
.
OPTIONAL
check_cert_ extension Check (enabled) or do not check (disabled) the presence of CRL
Distribution Point extension.
The default is
disabled
.
OPTIONAL
time_checking Take (enabled) or do not take (disabled) time restrictions into
account.
The default is
enabled
.
OPTIONAL
net_timeout A number between 0 and 999999999 (seconds).
Represents the maximum time to (re)try to connect to external
servers. The default is
10
.
Note
Specify 0 for an infinite retry period.
OPTIONAL
http_proxy_address Indicates the IP address of the HTTP proxy to use for CRL
retrieval.
Note
Specifying 0.0.0.0 means that no proxy is to be used.
OPTIONAL
http_proxy_port Indicates the HTTP proxy port to use for CRL retrieval.
The default is
1080
.
Note
Specify 0 in case no proxy port is to be used.
OPTIONAL