Enterasys Networks XSR CLI Router User Manual


 
Other Certificate Commands
14-90 Configuring the VPN
show crypto ca identity
ThiscommanddisplaysdataaboutenrolledCertificateAuthorities(CA).
Syntax
show crypto ca identity
Mode
EXECorGlobalconfiguration:XSR> or XSR(config)#
Sample Output
Thefollowingoutputdisplayswhenyouinvokethecommand:
XSR#show crypto ca identity
CA Identity - childca2
Enrollment Information:
Retry Period: 5 minutes
Retry Count: 3
Crl Frequency: 60 minutes
CA Identity - childca1
Enrollment Information:
Retry Period: 5 minutes
Retry Count: 3
Crl Frequency: 60 minutes
CA Identity - ldapca
Enrollment Information:
URL: http://1.1.1.10/certsrv/mscep/mscep.dll/
Retry Period: 5 minutes
Retry Count: 3
Crl Frequency: 60 minutes
Other Certificate Commands
crypto ca authenticate
ThiscommandauthenticatestheCertificateAuthority(CA)byobtainingtheCAʹscertificate.It
acquirestheCAcertificate,computestheCAʹsfingerprint,andstoresthecertificateand
fingerprintlocally.
Syntax
crypto ca authenticate name
name
ThenameoftheCA.ThisisthesamenameusedwhentheCAwasdeclaredwiththe
crypto ca identity command.