interface interface-type interface-number: Specifies the primary IPv4 address or the lowest IPv6 address
of an interface as the source IP address. The interface-type interface-number argument specifies an
interface.
Usage guidelines
Use this command to specify the source IP address for PKI protocol packets so that the CA server accepts
the certificate requests from a specific IP address or subnet. You can also specify an interface in this
command to use the IP address of the interface as the source IP address if the IP address is dynamically
obtained.
The route between the specified source IP address and the CA server must be reachable.
A PKI domain can have only one source IP address. If you configure this command multiple times, the
most recent configuration takes effect.
Examples
# Specify the source IP address of PKI protocol packets as 111.1.1. 8 .
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] source ip 111.1.1.8
# Specify the source IPv6 address of PKI protocol packets as 1::8.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] source ipv6 1::8
# Specify the IP address of the interface VLAN-interface 1 as the source IPv4 address of PKI protocol
packets.
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] source ip interface vlan-interface 1
# Specify the IPv6 address of the interface VLAN-interface 1 as the source IPv6 address of PKI protocol
packets.
<Sysname> system-view
[Sysname] pki domain 1
[Sysname-pki-domain-1] source ipv6 interface vlan-interface 1
state
Use state to set the state or province name for a PKI entity.
Use undo state to remove the configuration.
Syntax
state state-name
undo state
Default
No state name of province name is set for a PKI entity.
225
To Next Page
Loading...
Need help?
General
