Network Router User Manual

236 Brocade Mobility RFS4000, RFS6000 and RFS7000 CLI Reference Guide
53-1001931-01
Global Configuration commands
5
key
[export|generate|import|
zeroize]
Authentication key management functions.
• export rsa <name> URL [tftp|ftp] – Exports a keypair related
configuration
• generate rsa <name> <1024-2048> – Generates a keypair
• <1024-2048> – Size of keypair in bits
• import rsa <name> URL [tftp|ftp] – Imports keypair related
configuration
• zeroize rsa <name> – Deletes a keypair
• rsa <identifier> – RSA keypair identifier associated with
keypair
• URL for sending the key, it can be one of the following:
• tftp://<IP>/path/file (or)
• ftp://<user>:<passwd>@<IP>/path/file
map <name> <sequence>
[ipsec-isakmp|
ipsec-manual] dynamic
Enter a crypto map. For more information, see
Crypto-map Instance on page 371.
• name <name> – Names the crypto map entry (not to exceed
32 characters)
• <1-1000> – Sequence to insert into crypto map entry
• ipsec-isakmp – IPSEC w/ISAKMP
• ipsec-manual – IPSEC w/manual keying
• dynamic – Dynamic map entry (remote VPN
configuration) for XAUTH with mode-config or ipsec-l2tp
configuration
pki [authenticate|enroll|
export|import|trustpoint]
Configures certificate parameters. The public key infrastructure is
a protocol that creates encrypted public keys using digital
certificates from certificate authorities. The PKI ensures each
online party is who they claim to be.
• authenticate <name> (terminal|tftp|ftp) – Defines the
authenticate and import CA certificate
• enroll <name> (request|self-signed) – Generates a
certificate request or selfsigned certificate for the trustpoint
• export <name> (request|trustpoint) (tftp|ftp) – Exports the
trustpoint related configuration
• import – Imports a trustpoint related configuration
• certificate – Imports server certificate for the trust point
• crl – certificate Revocation list
• URL – URL to get certificate from URLS:
tftp://<IP>/path/file
ftp://<user>:<passwd>@<IP>/path/file
• terminal – Copy and paste mode of enrollment
• trustpoint – Import trust point including either private
key and server certificate or ca certificate or both
• trustpoint – Creates and configures a trustpoint