Cisco ASR 1000 Series User Manual

Page 44 of 72
 match-value—Specifies the name or date to test with
the logical operator assigned by match-criteria.
Step3
(ca-certificate-map)# exit
Exits ca-certificate-map mode.
Step4
For IKEv1:
crypto isakmp profile ikev1-profile1
match certificate label
For IKEv2:
crypto ikev2 profile ikev2-profile1
match certificate label
Associates the certificate-based ACL defined with the crypto
pki certificate map command to the profile.
For example: To create a certificate map for IKEv1 to match four subject-name values of the
peer enter:
# conf t
(config)# crypto pki certificate map cert-map-match-all 99
(ca-certificate-map)# subject-name co cn=CC_PEER
(ca-certificate-map)# subject-name co o=ACME
(ca-certificate-map)# subject-name co ou=North America
(ca-certificate-map)# subject-name co c=US
(ca-certificate-map)#exit
(config)# crypto isakmp profile ike1-profile-match-cert
match certificate cert-map-match-all

Cisco ASR 1000 Series Specifications

General

Series	ASR 1000
Category	Network Router
Operating System	Cisco IOS XE
Memory	Up to 64 GB
Interfaces	10 Gigabit Ethernet
Power Supply	AC or DC options
Dimensions	Varies by model
Encryption	IPsec, SSL
Storage	Varies by model
Operating Temperature	32°F to 104°F (0°C to 40°C)
Humidity	5% to 95% non-condensing
MTBF	Varies by model