Cisco Cisco Packet Data Gateway (PDG) Prospecto
IPSec Certificates
▀ CRL Fetching
▄ Cisco StarOS IP Security (IPSec) Reference
130
CRL Downloads
Download from CDP Extension of Self-certificate
The following diagram illustrates the downloading of CRL from the self-certificate CDP extension (if present) at the
tunnel creation.
tunnel creation.
Figure 25. Call Flow: CRL Download from CDP Extension of Self-certificate
The certificate is then verified against the CRL before it is sent in the CERT payload of the IKE_AUTH message.