Cisco Cisco Packet Data Gateway (PDG)
IKEv2 RFC 5996 Compliance
CLI Commands ▀
IPSec Reference, StarOS Release 17 ▄
161
Add Hash and URL Encoding to Certificates
Use the following configuration to add Hash and URl encoding of certificates.
For a crypto map the configuration sequence is:
configure
context ctxt_name
crypto map template_name { ikev2-ipv4 | ikev2-ipv6 }
certificate name
pem url url
cert-enc cert-hash-url url url url
For a crypto template the configuration sequence is:
configure
context ctxt_name
crypto template template_name ikev2-dynamic
pem url url
cert-enc cert-hash-url url url url
Refer to the Command Line Interface Reference for a complete description of these commands and their keywords.
Enable Hash and URL Certificate Encoding
Hash and URL encoding must be enabled in a crypto map or crypto template.
For a crypto map the configuration sequence is:
configure
context ctxt_name
crypto map template_name { ikev2-ipv4 | ikev2-ipv6 }
allow-cert-enc cert-hash-url
For a crypto template the configuration sequence is:
configure
context ctxt_name
crypto template template_name ikev2-dynamic
allow-cert-enc cert-hash-url