PKI configuration examples ········································································································································· 230
Failed to obtain CRLs ·········································································································································· 247
Failed to export certificates ································································································································ 249
Failed to set the storage path ····························································································································· 249
Configuring IPsec ···················································································································································· 250
Overview ······································································································································································· 250
Security association ············································································································································· 252
Authentication and encryption ··························································································································· 253
IPsec implementation ··········································································································································· 253
Protocols and standards ····································································································································· 254
FIPS compliance ··························································································································································· 254
IPsec tunnel establishment ··········································································································································· 254
Implementing ACL-based IPsec ··································································································································· 255
Configuring an ACL ············································································································································ 256
Enabling QoS pre-classify ·································································································································· 267
Configuration task list ········································································································································· 269
Displaying and maintaining IPsec ······························································································································ 271
IPsec configuration examples······································································································································ 272
Configuring IPsec for RIPng ································································································································ 277
Configuring IKE ······················································································································································· 281
Overview ······································································································································································· 281
IKE negotiation process ······································································································································ 281
IKE security mechanism ······································································································································· 282
Protocols and standards ····································································································································· 283
FIPS compliance ··························································································································································· 283
vi