Wednesday, July 21, 2010

How to make cisco router as CA server

Here is a sample configuration to make a cisco router as CA server. Enter the following commands in global configuration mode.

  • crypto pki server CAname
  • issuer-name CN=domainname.com L=location C=country
  • grant auto
  • lifetime crl 24
  • lifetime certificate 200
  • lifetime ca-certificate 365
  • cdp-url http://ipaddress/CAnamecdp.CAname.crl
  • crypto pki trustpoint CAname
  • revocation-check crl
  • rsakeypair CAname

No comments:

Post a Comment