Managing IPSec Certificates

The following is an example of importing a certificate from a pem format:

*A:ALU-A# admin certificate import type cert input cf3:/pre-import/
R10cert.pem output R1-0cert.der format pem

The following is an example of exporting a certificate to a pem format:

*A:ALU-A#  admin certificate export type cert input R1-0cert.der output cf3:/
R10cert.pem format pem

The following example displays a profile output:

*A:ALU-A>config>system>security>pki# info
----------------------------------------------
            ca-profile "Root" create
                description "Root CA"
                cert-file "R1-0cert.der"
                crl-file "R1-0crl.der"
                no shutdown
            exit
----------------------------------------------
*A:ALU-A>config>system>security>pki#

The following example displays an ike-policy with cert-auth output:

*A:ALU-A>config>ipsec>ike-policy# info
----------------------------------------------
            auth-method cert-auth
            own-auth-method psk      
----------------------------------------------

The following example displays a static LAN-to-LAN configuration using cert-auth:

         interface "VPRN1" tunnel create
             sap tunnel-1.private:1 create
                  ipsec-tunnel "Sanity-1" create
                      security-policy 1
                      local-gateway-address 192.168.0.0 peer 192.168.0.1 delivery-
                       service 300
                      dynamic-keying
                         ike-policy 1
                         pre-shared-key "Sanity-1"
                         transform 1
                         cert
                           trust-anchor-profile "trustAnchorProfile_1"
                           cert-profile "certProfile_4"
                        exit
                     exit
                  no shutdown
              exit