HP ProCurve Secure Router 7203 dl Advanced Management And Configuration Manual page 903

N o t e
Using the Web Browser Interface for Advanced Configuration Tasks
c. Fill in information about the router in the Subject Name Information
and Lightweight Directory Access Protocol (LDAP) Information
sections:
i. Complete at least one of the fields in the Subject Name Informa-
tion section. The value that you enter is the value that the peer
uses to authenticate the local router using IKE. For example, if
the peer has added an email address to its remote ID list, you
should enter that email address in the Email Address field.
If the routers are using IKE main mode, you must include an IP
address to identify the router.
ii. For even greater flexibility, you can configure an ASN-DN for the
router. Enter the pertinent information in each field of the Light-
weight Directory Access Protocol (LDAP) Information section.
(See figure 14-79.)
d. Click Generate Request.
Figure 14-80. Loading a CRL
12. Loading a CRL ensures that the router does not connect to a peer whose
certificate has expired. You must load the CA manually.
a. Obtain the CRL from your CA. The CA server will allow you to copy
the CRL using the copy function in your browser or to download the
CRL to a file.
Setting Up Virtual Private Networks
14-103