Configure A Simple Certificate Enrollment Protocol Client - Digi TX40 User Manual

Virtual Private Networks (VPN)
n Disable debug messages.
n Basic auditing debug: Logs basic auditing information, (for example, SA up/SA down).
n Generic control flow : Select this for basic debugging information.
n Detailed control flow : More detailed debugging control flow.
n Raw data: Includes raw data dumps in hexadecimal format.
n Sensitive material: Also includes sensitive material in dumps (for example, encryption
keys).
6. Click Apply to save the configuration and apply the change.

Command line
1. Select the device in Remote Manager and click Actions > Open Console, or log into the TX40
local command line as a user with full Admin access rights.
Depending on your device configuration, you may be presented with an Access selection
menu. Type admin to access the Admin CLI.
2. At the command line, type config to enter configuration mode:
> config
(config)>
3. Set the IPsec debug value:
config> vpn ipsec advanced debug value
config>
where value is one of:
none. (Default) No debug messages are written.
n
basic_auditing: Logs basic auditing information, (for example, SA up/SA down).
n
generic_control: Select this for basic debugging information.
n
detailed_control: More detailed debugging control flow.
n
raw_data: Includes raw data dumps in hexadecimal format.
n
sensitive_data: Also includes sensitive material in dumps (for example, encryption
n
keys).
4. Save the configuration and apply the change
(config)> save
Configuration saved.
>
5. Type exit to exit the Admin CLI.
Depending on your device configuration, you may be presented with an Access selection
menu. Type quit to disconnect from the device.

Configure a Simple Certificate Enrollment Protocol client

Simple Certificate Enrollment Protocol (SCEP) is a mechanism that allows for large-scale X.509
certificate deployment. You can configure TX40 device to function as a SCEP client that will connect to
TX40 User Guide
IPsec
511