Release Notes

507 | local-custom-cert Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
local-custom-cert
local-custom-cert local-mac <lmac> ca-cert <ca> server-cert <cert>
suite-b <gcm-128 | gcm-256>
Description
This command configures the user-installed certificate for secure communication between a local controller
and a master controller.
Syntax
Parameter Description
<lmac>
MAC address of the local controller’s user-installed certificate.
ca-cert <ca>
User-defined name of a trusted CA certificate installed on the local controller.
Use the show crypto-local pki TrustedCA command to display the CA
certificates that have been imported into the controller.
server-cert <cert>
User-defined name of a server certificate installed on the local controller. Use
the show crypto-local pki ServerCert command to display the server
certificates that have been imported into the controller.
suite-b
If you configure your master controllers to use IKEv2 and custom-installed
certificates, you can optionally use Suite-B cryptographic algorithms for IPsec
encryption. Specify one of the following options:
l gcm-128 Use 128-bit AES-GCM Suite-B encryption
l gcm-256 Use 256-bit AES-GCM Suite-B encryption
Usage Guidelines
Use this command on a master controller to configure the custom certificate for communication with a local
controller. On the local controller, use the masterip command to configure the IP address and certificates for
the master controller. If your master and local controllers use certificates for authentication, the IPsec tunnel
will be created using IKEv2.
Example
The following command configures the local controller with a user-installed certificate:
(host) (config) #local-custom-cert local-mac 00:16:CF:AF:3E:E1 ca-cert cacert1 server-cert
servercert1
Related Commands
Command Description Mode
show local-cert-mac Display the IP, MAC address and certificate
configuration of local controllers in a master-local
configuration
Config mode on master
controllers.
Command History
Introduced in ArubaOS 6.1