Allied Telesis x510-28GPX, Справочник по командам

Страница: 2046 / 2822

C613-50170-01 Rev B Command Reference for x510 Series 2046
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
O
PEN
F
LOW
C
OMMANDS
OPENFLOW SSL PEER CERTIFICATE
openflow ssl peer certificate
Overview Use this command to enable a peer certificate to be sent from the machine that the
OpenFlow Controller is running.
Use the no variant of this command to disable a peer certificate from being sent
from the machine that the OpenFlow Controller is running.
Syntax
openflow ssl peer certificate {< file >|bootstrap}
no openflow ssl peer certificate
Default Peer certificate validation is disabled by default.
Mode Global Configuration
Usage This command enables or disables peer certification on an OpenFlow Controller.
Example To validate a peer certificate using the bootstrap mode, use the commands:
awplus# configure terminal
awplus(config)# openflow ssl peer certificate bootstrap
To disable peer certificate validation, use the commands:
awplus# configure terminal
awplus(config)# no openflow ssl peer certificate
Related
Commands
show openflow ssl
openflow controller
Command
changes
Version 5.4.7-1.1: command added
Parameter Description
<file>
The CA certificate of an OpenFlow Controller must be in PEM
format and specified with an absolute path using the format
flash:cacert.pem.

You must copy the file from the machine on which the OpenFlow
Controller is running beforehand to the OpenFlow switch.
bootstrap
In bootstrap mode, when the switch first connects to the
OpenFlow Controller, it accepts and saves to RAM a self-signed CA
certificate sent from the Controller. Thereafter, the OpenFlow
switch will only connect to OpenFlow Controllers signed by the
same CA certificate.