Siemens RX1400 - Installing a CA Certificate

Chapter 7
Examples
RUGGEDCOM NETCONF
Reference Guide
120 Installing a CA Certificate
• {ip type}
The public ip address type of the IPSec tunnel. Must be one of the following: address, any, default-route
hostname, or none.
• {ip value}
The value is based on the selected {ip type} value. For example, if address is chosen as the ip type, an ip
address is defined here.
• {network}
The local network address or subnet value of the IPSec tunnel (e.g 192.168.0.0/24).
• {key type}
The IPSec tunnel will be established using one of the following: certificates, certificates-any, none,
or rsasig.
• {certificate}
The name of the certificate already installed on the system.
• {nexthop type}
The next hop to the other system. Must be one of the following: address, default or default-route.
• {nexthop value}
The IP address of the next hop that can be used to reach the destination network. The value is defined based
on the selected {nexthop type} value. For example, if address is chosen as the nexthop type, an ip address is
defined here.
Section7.44
Installing a CA Certificate
This action uploads the contents of a Certificate Authority (CA) certificate to the device. Parameters include
<name>, <ca-name> and <private-key-name>.
<rpc message-id="233"
xmlns="urn:ietf:params:xml:ns:netconf:base:1.0">
<edit-config>
<target><candidate/></target>
<config>
<security xmlns="http://ruggedcom.com/ns/rmf_security">
<crypto>
<certificate>
<name>{name}</name>
<ca-name>{ca name}</ca-name>
<private-key-name>{private key name}</private-key-name>
<contents>
-----BEGIN CERTIFICATE-----
MIIC8jCCAlugAwIBAgIBATANBgkqhkiG9w0BAQUFADCBiTELMAkGA1UEBhMCQ0Ex...
IsAFEeX2iShlXT7OSYqS771RFFSp1dzirAcndiFeUUzXm5Gj8P4=
-----END CERTIFICATE-----
</contents>
</certificate>
</crypto>
</security>
</config>
</edit-config>
</rpc>]]>]]>