Verifying Configurations For Specified Settings - Cisco 7604 Configuration Manual

Certificate Configuration
To configure secure authentication to the HTTP client, enter the following command:
Step 2
hostname (config)# aaa authentication secure-http-client
For more information about command usage, see the Catalyst 6500 Series Switch and Cisco 7600 Series
Router Firewall Services Module Command Reference.

Verifying Configurations for Specified Settings

Before you import third-party certificates, you must have configured certain AAA settings, the AAA
server, access lists, and optionally, virtual HTTP. To verify configurations for specified settings, perform
the following steps:
To verify that the required access lists have been configured, enter the following command:
Step 1
hostname(config)# show run access-list
The following is sample output from the show run access-list command that displays the configured
access-list:
access-list temp extended permit ip any any
To verify that the AAA server has been configured, enter the following command:
Step 2
hostname(config)# show run aaa-server
The following is sample output from the show run aaa-server command that displays the configured
AAA server:
aaa-server new protocol tacacs+
aaa-server new (outside) host 10.77.152.80
key cisco
To verify that the AAA settings have been configured, enter the following command:
Step 3
hostname(config)# show run aaa
The following is sample output from the show run aaa command that displays the configured AAA
settings:
aaa authentication match temp outside new
aaa authentication secure-http-client
Step 4 (Optional) To display the imported certificate name and its associated IP address, enter the following
command:
hostname(config)# show run name
The following is sample output from the show run name command that displays the imported certificate
name and its associated IP address:
name 10.77.152.104 atl-lx-sbacchus.cisco.com
(Optional) To display the virtual IP address, enter the following command:
Step 5
hostname(config)# show running-config virtual
The following is sample output from the show running-config virtual command, which displays the
name of the imported certificate that has been mapped to the virtual IP address:
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
12-6
Chapter 12 Configuring Certificates
OL-20748-01