D-Link DWS-1008 Informations techniques télécharger pdf (Page 297)

296

DWS-1008 CLI Reference Guide

D-Link Systems, Inc.

Cryptography Commands

crypto pkcs12

Unpacks a PKCS #12 object ﬁle into the certiﬁcate and key storage area on the switch.

This object ﬁle contains a public-private key pair, a DWS-1008 switch certiﬁcate signed by a

certiﬁcate authority, and the certiﬁcate authority’s certiﬁcate.

Syntax: crypto pkcs12 {eap} ﬁle-location-url

eap Unpacks a PKCS #12 object ﬁle for an EAP certiﬁcate and key

pair - and optionally the certiﬁcate authority’s own certiﬁcate - for

authenticating the switch to 802.1X supplicants (clients).

ﬁle-location-url Location of the PKCS #12 object ﬁle to be installed. Specify a

location of between 1 and 128 alphanumeric characters, with no

spaces.

Defaults: The password you enter with the crypto otp command must be the same as

the one protecting the PKCS #12 ﬁle.

Access: Enabled.

Usage: To use this command, you must have already created a one-time password with

the crypto otp command.

You must also have the PKCS #12 object ﬁle available. You can download a PKCS #12 object

ﬁle via TFTP from a remote location to the local nonvolatile storage system on the switch.

Examples: The following commands copy a PKCS #12 object ﬁle for an EAP certiﬁcate and

key pair—and optionally the certiﬁcate authority’s own certiﬁcate—from a TFTP server to

nonvolatile storage on the switch, create the one-time password hap9iN#ss, and unpack the

PKCS #12 ﬁle:

DWS-1008# copy tftp://192.168.253.1/2048full.p12 2048full.p12

success: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]

DWS-1008# crypto otp eap hap9iN#ss

OTP set

DWS-1008# crypto pkcs12 eap 2048full.p12

Unwrapped from PKCS12 ﬁle:

keypair

device certiﬁcate

CA certiﬁcate

1 2 ... 292 293 294 295 296 297 298 299 300 301 302 ... 405 406

Pas de commentaire

D-Link DWS-1008 Informations techniques Page 297