Filter
Top Products
9-37
User Guide for Resource Manager Essentials 4.1
OL-11714-01
Chapter 9 Making and Deploying Configuration Changes Using NetConfig
Using System-defined Tasks
For each device category, click on Applicable Devices to view the devices in your selection, to which
this task applies.
Certification Authority Task
You can use the Certification Authority (CA) system-defined configuration task to provide
manageability and scalability for IP Security (IPSec) standards. The Certification Authority task can be
used only on IOS devices configured for VPN functionality.
This task is applicable to IOS devices (including Cable devices).
For more details, see Table 9-3.
You can enter the details of this task in the Certification Authority Configuration dialog box. (To invoke
this dialog box, see
Starting a New NetConfig Job.)
For this task to work correctly, you must use any CLI-based protocol (Telnet or SSH) as the download
protocol.
For the features of system-defined tasks and a description of the features of a system-defined task dialog
box, see
Understanding the System-defined Task User Interface (Dialog Box).
The fields in the Certification Authority Configuration dialog box are:
Group Sub-Group Field Description
IOS Parameters Declare CA Action Select Enable or Disable to activate/deactivate
Certification Authority (CA).
• If you select Enable you can create or modify CA.
• If you select Disable, you can delete the CA.
Select No Change, to leave the CA Name unchanged.
CA Name Enter the CA name. This name is used to identify the
certification authority to be configured.
This name is the CA domain name.
Enrollment URL Action • Select Enable to allow router to connect to the CA,
using the URL specified in the Value field.
• Select Disable, if you do not want to connect to the CA.
• Select No Change to leave the Enrollment URL field
unchanged.
Valu e Enter the URL of the CA.
The URL should include any available non-standard cgi-bin
script location.
Enrollment Mode Action • Select Enable if the CA provides a Registration
Authority (RA).
• Select Disable to disable the specified LDAP Server.
• Select No Change to leave the Enrollment Mode field
unchanged.