Ip-Address (Trustpoint) - Cisco CRS User Manual

Public Key Infrastructure Commands

ip-address (trustpoint)

To specify a dotted IP address that is included as an unstructured address in the certificate request, use the
ip-address command in trustpoint configuration mode. To restore the default behavior, use the no form of
this command.
ip-address {ip-address| none}
no ip-address {ip-address| none}
Syntax Description
ip-address
none
Command Default
You are prompted for the IP address during certificate enrollment.
Command Modes
Trustpoint configuration
Command History
Release
Release 3.4.0
Usage Guidelines
Use the ip-address command to include the IP address of the specified interface in the certificate request or
to specify that an IP address should not be included in the certificate request.
Task ID
Task ID
crypto
Examples The following example shows how to include the IP address of the Ethernet-0 interface in the certificate
request for the trustpoint frog:
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# crypto ca trustpoint frog
RP/0/RP0/CPU0:router(config-trustp)# enrollment url http://frog.phoobin.com
RP/0/RP0/CPU0:router(config-trustp)# subject-name OU=Spiral Dept., O=tiedye.com
RP/0/RP0/CPU0:router(config-trustp)# ip-address 172.19.72.120
The following example shows that an IP address is not to be included in the certificate request:
RP/0/RP0/CPU0:router# configure
OL-24740-01
Dotted IP address that is included in the certificate request.
Specifies that an IP address is not included in the certificate request.
Modification
This command was introduced.
Operations
read, write
Cisco IOS XR System Security Command Reference for the Cisco CRS Router, Release 4.1
ip-address (trustpoint)
213