配置cisco vpn client使用scep从ios router ca获取证书

《配置cisco vpn client使用scep从ios router ca获取证书》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。

1、首先看一下如何用iosrouter做caserver。hostnameR3ipdomainnamecisco.com//这两个命令必须配，用来生成key!cryptopkiserverR3cdp-urltftp://10.0.78.102/R3.crl//生成正书后，把相应的R3.crl文件上传到tftp服务器上去databaselevelcompletedatabasearchivepempassword0cisco123issuer-namecn=CAServer,c=CN,o=BJENET//这上面的4行

2、是需要配置的，底下的两组pki命令都是router自己生成的，配置完后要noshutdown一下，只会ios会自己生成key(默认1024位)，如果你仔细的话会发现key的名字和pkiserver的名字是一样的，对头，你要是出于安全考虑，想自己生成一个2048位的key，那么就要注意pkiserver的名字需要和key的名字一样!cryptopkitrustpointR3revocation-checkcrlrsakeypairR3!cryptopkicertificatechainR3certificatec

3、a013082023B308201A4A003020102020101300D06092A864886F70D01010405003031310F300D060355040A1306424A454E4554310B300906035504061302434E3111300F060355040313084341536572766572301E170D3036303732313139333235325A170D3039303732303139333235325A3031310F300D060355040A13064

4、24A454E4554310B300906035504061302434E3111300F06035504031308434153657276657230819F300D06092A864886F70D010101050003818D0030818902818100A80B2C3A575A8EE6C334597DBF04B2BFAE6F900C37A62485D6A8DDF2AD92899AA91E353BE83CD28347D4B2567602E855D748021F4E665F31C68CDAEB7D558

5、D4DB11E2595BE5A890BD2FD5DF341E125EC8E4AC29B63FCF70A73E26B15B5EB9D5AA19399A886CE58FCE9F4037EEADFE056AE0210EC2B54E27E51DA4E5F00DAF0670203010001A3633061300F0603551D130101FF040530030101FF300E0603551D0F0101FF040403020186301F0603551D23041830168014AC96834830127CFA7

6、903715F41EAE227A72185A9301D0603551D0E04160414AC96834830127CFA7903715F41EAE227A72185A9300D06092A864886F70D01010405000381810061C47440E3E0CA2B14C144CAFA8BFC1EF833992F65E477A0E840B1DCA1ED9DBD56FF98E71B4CF12CB1257AF839C7667BFCE8DDD8374DAB52687F82F1A986552A8218E39

7、7B37CFD3387AFDFA7B460B39FEB8B94A996099C620E0A2EB3A3D0B54AC0CB60B2BC4ED1F2C6E337328C4944877EBC64C241AEAC546D06D99D6A10759Cquit!iphttpserver//把80端口打开，vpnclient正是用这个端口从这个caserver获取证书!ntpserver129.6.15.28//一定要让ca和vpnclient的时间同步，当然最好的方法就是ntp了R3#shocryptokeymypubk

8、eyrsa%Keypairwasgeneratedat:03:32:43UTCJul222006Keyname:R3//look！key的名字和pkiserver的名字一样Usage:GeneralPurposeKeyKeyisnotexportable.KeyData:30819F300D06092A864886F70D010101050003818D0030818902818100