C613-50631-01 Rev A Command Reference for IE340 Series 2315
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
AUTHENTICATION COMMANDS
AUTH
-WEB-SERVER TRUSTPOINT
auth-web-server trustpoint
Overview Use this command to set the PKI trustpoint to use for secure web authentication
communication to an AlliedWare Plus device.
Use the no variant of this command to revert to using the default trustpoint
‘default-selfsigned’.
Syntax
auth-web-server trustpoint <trustpoint-name>
no auth-web-server trustpoint
Default By default, web authentication uses the ‘default-selfsigned’ trustpoint.
Mode Global Configuration
Usage notes Before using the auth-web-server trustpoint command you will need to
establish a trustpoint. For example, you can create a local self-signed trustpoint
using the procedure outlined below.
Create a self-signed trustpoint called ‘web-trust’ with keypair ‘web_key’:
awplus# configure terminal
awplus(config)# crypto pki trustpoint web-trust
awplus(ca-trustpoint)# enrollment selfsigned
awplus(ca-trustpoint)# rsakeypair web_key
awplus(ca-trustpoint)# exit
awplus(config)# exit
Create the root and server certificates for this trustpoint:
awplus# crypto pki authenticate web-trust
awplus# crypto pki enroll web-trust
For more information about the AlliedWare Plus implementation of Public Key
Infrastructure (PKI), see the Public Key Infrastructure (PKI) Feature Overview and
Configuration Guide
Example To configure web authentication to use the trustpoint ‘web-trust’, use the
commands:
awplus# configure terminal
awplus(config)# auth-web-server trustpoint web-trust
Parameter Description
<trustpoint-name> Name of trustpoint