Листовка для Cisco Cisco Packet Data Gateway (PDG)
Global Configuration Mode Commands (A-K)
certificate ▀
Cisco ASR 5x00 Command Line Interface Reference ▄
5033
certificate
Configures and selects an X.509 Trusted Author certificate.
Product
All IPSec-related products
Privilege
Administrator, Security Administrator, Operator
Mode
Exec > Global Configuration
configure
Entering the above command sequence results in the following prompt:
[local]host_name(config)#
Syntax
certificate name name { der url url | pem { data pemdata | url url } private-key pem { [
encrypted ] data pemdata | url url [cert-enc] [cert-hash-url url url ] } }
encrypted ] data pemdata | url url [cert-enc] [cert-hash-url url url ] } }
no certificate name name
no
Disables certificate.
name
name
Names the certificate.
name
must be from 1 to 128 alphanumeric characters.
der url
Specifies that the der format is to be used.
url
is the url of the file containing certificate in der format.
url
must be an existing URL expressed in one
of the following formats:
[file:]{/flash | /pcmcia1 | /hd-raid}[/directory]/<filename
tftp://<host>[:<port>][/<directory>]/<filename
ftp://[<username>[:<password>]@]<host>[:<port>][/<directory>]/<filename
sftp://[<username>[:<password>]@]<host>[:<port>][/<directory>]/<filename
http://[<username>[:<password>]@]<host>[:<port>][/<directory>]/<filename
pem
Specifies that the Privacy-enhanced Electronic Mail (PEM) format is to be used.
data
pemdata
Certificate/private key data in PEM format.
pemdata
must be an alphanumeric string of 1 through 4095 (if
private key is not implmented) or 1 through 8191 (if private key is implemented) characters.