для Cisco Cisco Packet Data Gateway (PDG)
IPSec Certificates
▀ CRL Fetching
▄ IPSec Reference, StarOS Release 18
128
CRL Downloads
Download from CDP Extension of Self-certificate
The following diagram illustrates the downloading of CRL from the self-certificate CDP extension (if present) at the
tunnel creation.
tunnel creation.
Figure 25. Call Flow: CRL Download from CDP Extension of Self-certificate
The certificate is then verified against the CRL before it is sent in the CERT payload of the IKE_AUTH message.