Digi IX10, Руководство пользователя

Страница: 295 / 874

Virtual Private Networks (VPN) IPsec
IX10 User Guide 295
1. Select the device in Remote Manager and click Actions > Open Console , or log into the IX10
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Set the IPsec debug value:
config> vpn ipsec advanced debug value
config>
where value is one of:
n none . (Default) No debug messages are written.
n
basic_auditing : Logs basic auditing information, (for example, SA up/SA down).
n
generic_control : Select this for basic debugging information.
n
detailed_control : More detailed debugging control flow.
n
raw_data : Includes raw data dumps in hexadecimal format.
n
sensitive_data : Also includes sensitive material in dumps (for example, encryption
keys).
4. Save the configuration and apply the change:
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu . Type quit to disconnect from the device.
Configure a Simple Certificate Enrollment Protocol client
Simple Certificate Enrollment Protocol (SCEP) is a mechanism that allows for large-scale X.509
certificate deployment. You can configure IX10 device to function as a SCEP client that will connect to
a SCEP server that is used to sign Certificate Signing Requests (CSRs), provide Certificate Revocation
Lists (CRLs), and distribute valid certificates from a Certificate Authority (CA).
Required configuration
n
Enable the SCEP client.
n
The fully-qualified domain name of the SCEP server to be used for certificate requests.
n
The challenge password provided by the SCEP server that the SCEP client will use when
making SCEP requests.
n
The distinguished name to be used for the CSR.