Juniper JUNOSE 11.0, Справочник по командам

Страница: 1021 / 1486

ipsec crl
Syntax
ipsec crl { ignored | optional | required }
no ipsec crl
Release Information
Command introduced before JUNOSe Release 7.1.0.
Description
Controls how the router checks certificate revocation lists (CRLs) when determining
whether to accept a peer's certificates. The
no version restores the default setting.
NOTE: This command is replacing the ike crl command. The ike crl command may
be removed completely in a future release.
Options
ignored—Specifies that the router will not try to find or use CRLs
■
■
optional—Specifies that the router will try to find a CRL. If a CRL is found, the
peer certificate must not appear in the CRL. If no CRL is found, the peer can still
authenticate; this is the default.
■
required—Specifies that the router must find a valid CRL; the CRL must be current,
and the peer certificate must not appear in the CRL
Mode
Global Configuration
ipsec crl
■ 979
Chapter 10: I Commands