Cisco Cisco Identity Services Engine 1.2 产品宣传页

安全访问操作指南

步骤

运行会话下载。

./session_download.sh -keystoreFilename pxGridClient.jks -keystoreFilename cisco123 -truststoreFilename

root3.jks -truststorePassword cisco123 -username MacBook-Pro -hostname 10.0.0.96

------- properties -------

version=1.0.0

hostnames=10.0.0.96

username=MacBook-Pro

keystoreFilename=pxGridClient.jks

keystorePassword=cisco123

truststoreFilename=root3.jks

truststorePassword=cisco123

filter=null

start=null

end=null

--------------------------

connecting...

connected.

starting at Wed Dec 10 18:44:49 EST 2014...

session (ip=10.0.0.18, Audit Session Id=0A0000020000000B006E1086, User Name=jeppich, AD User DNS

Domain=lab6.com, AD Host DNS Domain=null, AD User NetBIOS Name=LAB6, AD Host NETBIOS Name=null, Calling

station id=00:0C:29:D1:8D:90, Session state= STARTED, Epsstatus=null, Security Group=null, Endpoint

Profile=VMWare-Device, NAS IP=10.0.0.2, NAS Port=GigabitEthernet1/0/15, RADIUSAVPairs=[ Acct-Session-

Id=00000002], Posture Status=null, Posture Timestamp=, Session Last Update Time=Wed Dec 10 16:41:48 EST

2014 )... ending at: Wed Dec 10 18:44:49 EST 2014

---------------------------------------------------

downloaded 1 sessions in 26 milliseconds

---------------------------------------------------

connection closed

查看密钥库条目

通过查看密钥库条目，可以查看身份和信任密钥库的受信任证书条目。

步骤

验证信任密钥库

root3.jks。

keytool -list -v -keystore root3.jks

Enter keystore password: cisco123

Keystore type: JKS

Keystore provider: SUN

Your keystore contains 3 entries

Alias name: ca_root1

Creation date: Dec 10, 2014

Entry type: trustedCertEntry

Owner: CN=lab6-WIN-BG7GPQ053ID-CA, DC=lab6, DC=com

Issuer: CN=lab6-WIN-BG7GPQ053ID-CA, DC=lab6, DC=com

Serial number: 448a6d6486c91cb14c6888c127d16c4e

Valid from: Thu Nov 13 20:47:06 EST 2014 until: Wed Nov 13 20:57:06 EST 2019

Certificate fingerprints:

MD5: 41:10:8A:F5:36:76:79:9C:2C:00:03:47:55:F8:CF:7B

SHA1: 9D:DA:06:AF:06:3F:8F:5E:84:C7:F4:58:50:95:03:22:64:48:96:9F

SHA256:

DB:28:50:D6:47:CA:C0:6A:E9:7B:87:B4:0E:9C:3A:C1:A2:61:EA:D1:29:8B:45:B4:76:4B:DA:2A:F1:D8:E0:A3

Signature algorithm name: SHA256withRSA

Version: 3

第

13 页