PurposeCommand or Action
Specifies a local configuration name for the CA trustpoint and enter
CA trustpoint configuration mode.
crypto ca trustpoint name
Example:
Switch(config)# crypto ca trustpoint
Step 5
your_trustpoint
Specifies the URL to which the switch should send certificate
requests.
enrollment url url
Example:
Switch(ca-trustpoint)# enrollment url
Step 6
http://your_server:80
(Optional) Configures the switch to obtain certificates from the
CA through an HTTP proxy server.
enrollment http-proxy host-name port-number
Example:
Switch(ca-trustpoint)# enrollment
Step 7
•
For host-name , specify the proxy server used to get the CA.
•
For port-number, specify the port number used to access the
CA.
http-proxy your_host 49
Configures the switch to request a certificate revocation list (CRL)
to ensure that the certificate of the peer has not been revoked.
crl query url
Example:
Switch(ca-trustpoint)# crl query
ldap://your_host:49
Step 8
(Optional) Specifies that the trustpoint should be used as the
primary (default) trustpoint for CA requests.
primary name
Example:
Switch(ca-trustpoint)# primary
Step 9
•
For name, specify the trustpoint that you just configured.
your_trustpoint
Exits CA trustpoint configuration mode and return to global
configuration mode.
exit
Example:
Switch(ca-trustpoint)# exit
Step 10
Authenticates the CA by getting the public key of the CA. Use the
same name used in Step 5.
crypto ca authentication name
Example:
Switch(config)# crypto ca authentication
Step 11
your_trustpoint
Catalyst 2960-XR Switch Security Configuration Guide, Cisco IOS Release 15.0(2)EX1
98 OL-29434-01
Configuring Secure Socket Layer HTTP
Configuring a CA Trustpoint
To Next Page
Loading...
Need help?
General
