HP 7102dl - ProCurve Secure Router Configuration Manual page 552

Virtual Private Networks
Configuring a VPN Using IPSec
N o t e
10-58
For example:
ProCurve(ca-profile)# enrollment url http://isakmp-test.ssh.fi/
The domain name should be fully qualified. If you do not include a program
name, the router will use the default program pkiclient.exe.
If you will be loading certificates manually, use this option for the command:
ProCurve(ca-profile)# enrollment terminal
The url and terminal options are mutually exclusive, and the most recently
entered option takes precedence. For example, if you enter a URL for your
CA server and then enter enrollment terminal, the URL will be erased.
Refer to Table 10-18 for the commands for specifying various information
about the router in the CA profile. The ProCurve Secure Router OS uses this
information when you configure it to generate the self certificate request to
this CA.
Entering this information now is optional. You can also enter this information
later, in a dialog box, when you actually generate the request. Note that your
VPN peer must match this information for the local router in its remote ID list.
Table 10-18. Adding Information for a Self Certificate Request to a CA Profile
Information
IP address
domain name
email address
subject name
serial number
password
Loading a CA Certificate. You load a CA certificate from the global config-
uration mode context:
Syntax: crypto ca authenticate <profile name>
Specify the profile configured for the CA. For example:
ProCurve(config)# crypto ca authenticate MyCA
Command Syntax
ip-address <A.B.C.D>
fqdn <domain name>
email-address <email address>
subject-name <name>
serial-number
password <password>