Digi IX14, Руководство пользователя

Страница: 577 / 828

Virtual Private Networks (VPN) IPsec
IX14 User Guide 577
6. For Renewable Time , type the number of days that the certificate enrollment can be renewed,
prior to the request expiring. This value must match the setting of the Allow renewal x days
before the certified is expired option on the Fortinet server.
7. (Optional) For CRL file name, type the filename of the Certificate Revocation List (CRL) from the
CA. The filename of the CRL corresponds to the Certificate ID of the CA created on the Fortinet
server, for example,
fortinet_example_ca.crl .
8. Click to expand SCEP server .
9. For FQDN , type the fully qualified domain name or IP address of the Fortinet server.
10. For Password , type the challenge password. This corresponds to the Default enrollment
password on the Fortinet server.
11. Click to expand Distinguished Name .
12. Type the value for each appropriate Distinguished Name attribute. The values entered here
must correspond to the DN attributes in the Enrollment Request on the Fortinet server.
13. Click Apply to save the configuration and apply the change.

Command line
1. Log into the IX14 command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu . Type admin to access the Admin CLI.