Zte ZXR10 2900E Series - Create Ca

Chapter4ServiceConguration
Guidelines
TheSSLserverfunctionandHTTPserverfunctionaremutuallyexclusive.
4.46.2createca
Purpose
ThiscommandcreatesaCAcerticate.
CommandMode
Globalcongurationmode
Syntax
createca{<A.B.C.D/M>|<A.B.C.D><A.B.C.D>}
ParameterDescription
ParameterDescription
<A.B.C.D/M>IPaddressandmask
<A.B.C.D>IPaddress
<A.B.C.D>Mask
Guidelines
TheIPaddressconguredinthiscommandmustbethesameastheIPaddressofthe
SSLserver.TheCAcerticatemustbecreatedbeforetheSSLserverisenabled.TheCA
certicatecreatedincludesaservercerticate(/ash/data/server.pem)androotcerticate
(/ash/data/root.cer).Therootcerticatemustbeimportedandaddedtothebrowser
operatingastheclient.
Example
ThefollowingexamplecreatesaCAcerticate:
zte(cfg)#configrouter
zte(cfg-router)#setipp1ip192.168.100.140/24
zte(cfg-router)#setipp1en
zte(cfg-router)#ex
zte(cfg)#createca192.168.100.140/24
CAFILEforIP"192.168.100.110"hasexsit.
Enter[Yes]tocreatenewoneforIPyoujusttype(otherkeysare[No]):y
caiscreating,pleasewait......
Rootcafile/flash/data/root.cer,hascreated!
Servercafile/flash/data/server.pem,hascreated!
4-611
SJ-20130731155059-003|2013-11-27(R1.0)ZTEProprietaryandCondential