Huawei AR1200-S Configuration Manual page 239

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
l
l
l
l
l
l
Before starting the configuration, ensure that routes between the Router, user hosts, and CA are reachable.
Issue 02 (2012-03-30)
Configure a PKI entity and a PKI domain.
Configure a server SSL policy.
Configure the Router as an HTTPS server.
Router's interface connected to the Internet: Ethernet1/0/0
IP address of Ethernet1/0/0: 11.1.1.1/24
IP address of the CA: 11.137.145.158/24
PKI parameters, as shown in the following table.
Item
PKI entity
PKI domain
SSL parameters, as shown in the following table.
Policy Name
sslserver
HTTPS service port number: 1278
NOTE
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
Data
PKI entity name: users
l Entity's common name: hello
l Entity's country code: CN
l Entity's province name: jiangsu
l Entity's organization name: huawei
l Entity's department name: info
PKI domain name: users
l Trusted CA: ca_root
l Certificate's enrollment URL: http://
11.137.145.158:8080/certsrv/mscep/mscep.dll ra
l Bound PKI entity: users
l CA's fingerprint algorithm: secure hash algorithm
(SHA)
Fingerprint:
7bb05ada0482273388ed4ec228d79f77309ea3f4
Maximum Number of
Sessions
40
11 SSL Configuration
Session Timeout Period
7200s
225