Cisco Cisco Packet Data Interworking Function (PDIF) Guía Para Resolver Problemas
Global Configuration Mode Commands
▀ certificate
▄ Cisco ASR 5000 Series Command Line Interface Reference
OL-22948-01
certificate
Configures and selects an X.509 Trusted Author certificate.
Product
ECS
PDG/TTG
PDIF
Privilege
Administrator, Security Administrator, Operator
Syntax
Removes the named certificate.
Names the certificate.
The PEM-formatted data can be specified (
or the information can be read from a file via
url
). When read via a file, note that
will not contain the URL reference, but
will instead output the data via
, such that the configuration file is self-contained.
Usage
A certificate authority or certification authority (CA) is an entity which issues digital certificates for use by
other parties. It is an example of a trusted third party. CAs are characteristic of many public key infrastructure
(PKI) schemes.
If CERT information is configured, PDIF will include the CERT payload in the first IKE_AUTH Response
during the first authentication. PDIF stores its own certificate for use in the first AUTH calculation. MS will
not have its own certificate from CA. Still it will be capable of accepting a certificate from PDIF and verify
AUTH.
The operator/administrator is responsible for configuring the certificates through the CLI. PDIF will generate
an SNMP notification when the certificate is within 30 days of expiration, and then once a day.
other parties. It is an example of a trusted third party. CAs are characteristic of many public key infrastructure
(PKI) schemes.
If CERT information is configured, PDIF will include the CERT payload in the first IKE_AUTH Response
during the first authentication. PDIF stores its own certificate for use in the first AUTH calculation. MS will
not have its own certificate from CA. Still it will be capable of accepting a certificate from PDIF and verify
AUTH.
The operator/administrator is responsible for configuring the certificates through the CLI. PDIF will generate
an SNMP notification when the certificate is within 30 days of expiration, and then once a day.
Example
Use the following command to remove a certificate named
Use the following command to remove a certificate named
: