Using the Web Browser Interface for Advanced Configuration Tasks
5.
In the Web browser interface, return to the Step 3 of 4: Enter or Upload
a Self Certificate window. Move to the Load Self Certificate - Base64
Encoded section and load the certificate into the system:
a.
You can manually paste in a PEM format certificate. Select the Paste
circle. Copy the self certificate that you obtained from your server
and paste it into the field below. Click Load Self Certificate.
b. Alternatively, you can select a file in which you have downloaded the
CA certificate. Choose the Select circle, click Browse, and open the
file.
Figure 14-75. Loading a CRL
6.
Loading a CRL ensures that the router does not connect to a peer whose
certificate has expired. Obtain the CRL from your CA. Then move to the
Step 4 of 4 (optional): Enter/Upload a Certificate Revocation List
window. You load the CRL as you did the self certificate. Again, you can
either cut and paste the list into the CA Certificate Revocation List -
Base64 Encoded section, or you can browse for a file into which you have
downloaded the CRL.
Setting Up Virtual Private Networks
14-99