H3C MSR Series Command Reference

507
If you configure this command multiple times, the most recent configuration takes effect.
Examples
# Configure the DN for PKI entity en.
<Sysname> system-view
[Sysname] pki entity en
[Sysname-pki-entity-en] subject-dn
CN=test,C=CN,O=abc,OU=rdtest,OU=rstest,ST=countryA,L=pukras
Related commands
common-name
country
locality
organization
organization-unit
state
usage
Use usage to specify the extensions for certificates.
Use undo usage to remove certificate extensions.
Syntax
usage { ike | ssl-client | ssl-server } *
undo usage [ ike | ssl-client | ssl-server ] *
Default
No certificate extensions are specified. A certificate can be used for IKE, SSL clients, and SSL
servers.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
ike: Specifies the IKE certificate extension so IKE peers can use the certificates.
ssl-client: Specifies the SSL client certificate extension so the SSL client can use the certificates.
ssl-server: Specifies the SSL server certificate extension so the SSL server can use the certificates.
Usage guidelines
If you do not specify any keywords for the undo usage command, this command removes all
certificate extensions.
The extension options contained in a certificate depends on the CA policy, and might be different
from those specified in the PKI domain.
Examples
# Specify the IKE certificate extension.
<Sysname> system-view
[Sysname] pki domain aaa

H3C MSR Series Specifications

General

Category	Network Router
IPv6 Support	Yes
Dimensions	Varies by model
Weight	Varies by model
Product Type	Modular Router
Ports	Varies by model
WAN Interfaces	Varies by model
Firewall	Yes
QoS	Yes
Wireless Support	Varies by model
USB Ports	Varies by model
Console Port	Yes
Power Supply	Varies by model
Redundancy	Varies by model
Operating Temperature	0°C to 45°C
Storage Temperature	-40°C to 70°C
Humidity	5% to 95% non-condensing
Series	MSR
Certifications	CE, FCC, RoHS