User's Manual

Fortress ES-Series CLI Guide: Network Security, Authentication and Auditing
125
Because Mesh Points used as wireless Clients must be
dedicated to the function, the EAP-TLS certificate will only
be used for one of these applications.
Use
set gui to assign a certificate to the GUI function:
# set gui -key <name>
Enter the name of the certificate with -key.
Use the
-nokey switch to clear the encryption key currently in
use.
# set gui -nokey
Similarly, assign certificates to IPsec and EAP-TLS with the
following commands:
# set ipsec -key <name>| -nokey
# set eap-tls -key <name>| -nokey
A given function can have only one certificate assigned to it.
You can, however, assign the same certificate to more than
one function.
View the certificates assigned to each function with the
corresponding show command:
> show gui
Status: On
SSL Private Key: ssl_auto_key
GUI Mode: Advanced
Require client certificate: no
> show ipsec
IPsec is enabled.
IPsec crypto suites: SuiteB128,Legacy
ISAKMP SA lifetime 1440 minutes
SA lifetime 2400 minutes, 5000 KB
CRL checking is enabled.
IKE version 1
No key pair used for IPsec authentication
> show eap-tls
EAP-TLS Private Key: EAP-TLS-Station