294
[Sysname-pki-cert-acp-mypolicy] rule 1 permit mygroup
Related commands
• attribute
• display pki certificate access-control-policy
• pki certificate attribute-group
source
Use source to specify the source IP address for PKI protocol packets.
Use undo source to remove the configuration.
Syntax
source { ip | ipv6 } { ip-address | interface interface-type interface-number }
undo source
Default
The source IP address is the outgoing interface IP address of the route to the CA.
Views
PKI domain view
Predefined user roles
network-admin
Parameters
ip ip-address: Specifies a source IPv4 address.
ipv6 ip-address: Specifies a source IPv6 address
interface interface-type interface-number: Specifies the primary IPv4 address or the lowest IPv6 address
of an interface as the source IP address. The interface-type interface-number argument specifies an
interface.
Usage guidelines
Use this command to specify the source IP address for PKI protocol packets so that the CA server accepts
the certificate requests from a specific IP address or subnet. You can also specify an interface in this
command to use the IP address of the interface as the source IP address if the IP address is dynamically
obtained.
The route between the specified source IP address and the CA server must be reachable.
A PKI domain can have only one source IP address. If you configure this command multiple times, the
most recent configuration takes effect.
Examples
# Specify the source IP address of PKI protocol packets as 111.1.1. 8 .
<Sysname> system-view
[Sysname] pki domain aaa
[Sysname-pki-domain-aaa] source ip 111.1.1.8
# Specify the source IPv6 address of PKI protocol packets as 1::8.
<Sysname> system-view
To Next Page
Loading...
Need help?
General
