Allied Telesis IE340-20GP - client name-check

C613-50631-01 Rev A Command Reference for IE340 Series 2465
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
LOCAL RADIUS SERVER COMMANDS
CLIENT
NAME-CHECK
client name-check
Overview This command sets the global behavior for certificate name-checking for the
RadSecProxy localserver application to on. This behavior will be used for all clients
associated with the application that do not specify a behavior on a per-client basis.
If name-checking is enabled, the Common Name portion of the subject field of the
client’s X.509 certificate must match the domain name or IP address specified in
the client (radsecproxy-aaa) command.
Use the no variant of this command to set the global behavior for certificate name
checking to off
Syntax
client name-check
no client name-check
Default Certificate name checking is on by default.
Mode RadSecProxy Local Server Configuration
Example Disable certificate name checking globally with the following command:
awplus# configure terminal
awplus(config)# radius-secure-proxy local-server
awplus(config-radsecproxy-srv)# no client name-check
Related
commands
client (radsecproxy-srv)
client trustpoint
radius-secure-proxy local-server