Siemens RUGGEDCOM MX5000RE, Справочное руководство

Страница: 132 / 148

Chapter 7
Examples
RUGGEDCOM NETCONF
Reference Guide
120 Installing a CA Certificate
•
{ip type}
The public ip address type of the IPSec tunnel. Must be one of the following: address , any , default-route
hostname , or none .
•
{ip value}
The value is based on the selected {ip type} value. For example, if address is chosen as the ip type, an ip
address is defined here.
•
{network}
The local network address or subnet value of the IPSec tunnel (e.g 192.168.0.0/24).
•
{key type}
The IPSec tunnel will be established using one of the following: certificates , certificates-any , none,
or rsasig .
•
{certificate}
The name of the certificate already installed on the system.
•
{nexthop type}
The next hop to the other system. Must be one of the following: address , default or default-route .
•
{nexthop value}
The IP address of the next hop that can be used to reach the destination network. The value is defined based
on the selected {nexthop type} value. For example, if address is chosen as the nexthop type, an ip address is
defined here.
Section 7.44
Installing a CA Certificate
This action uploads the contents of a Certificate Authority (CA) certificate to the device. Parameters include
<name>
,
<ca-name>
and
<private-key-name>
.
<rpc message-id="233"
xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<edit-config>
<target><candidate/></target>
<config>
<security xmlns="http://ruggedcom.com/ns/rmf_security">
<crypto>
<certificate>
<name>{name}</name>
<ca-name>{ca name}</ca-name>
<private-key-name>{private key name}</private-key-name>
<contents>
-----BEGIN CERTIFICATE-----
MIIC8jCCAlugAwIBAgIBATANBgkqhkiG9w0BAQUFADCBiTELMAkGA1UEBhMCQ0Ex...
IsAFEeX2iShlXT7OSYqS771RFFSp1dzirAcndiFeUUzXm5Gj8P4=
-----END CERTIFICATE-----
</contents>
</certificate>
</crypto>
</security>
</config>
</edit-config>
</rpc>]]>]]>