User Manual

10.1.3 Generate a route certificate authority
[Syntax]
crypto pki generate ca [ca-name]
no crypto pki generate ca
[Parameter]
ca-name : Certificate authority name
Characters that can be inputted for the certificate authority name
• Within 3–32 characters
•
Single-byte alphanumeric characters and symbols other than the characters \ [ ] " ? and spaces
• Cannot specify “DEFAULT”
[Initial value]
none
[Input mode]
global configuration mode
[Description]
Generates a route certificate authority to issue a client certificate.
“YAMAHA_SWITCH” will be used when the certificate authority is omitted.
If this command is executed with the "no" syntax, the specified route certificate authority is deleted.
[Note]
If a route certificate authority has not been generated, the functions of the local RADIUS server cannot be used.
When setting a different route certificate authority name when a route certificate authority has already been generated, the route
certificate authority will be overwritten.
When the route certificate authority is deleted or overwritten, all client certificates already issued will become invalid.
Even if a route certificate authority exists, it cannot be used as such unless the crypto pki generate ca settings have not been
made.
[Example]
This generates a route certificate authority with the name “MY RADIUS”.
SWR2311P(config)#crypto pki generate ca MYRADIUS
10.1.4 RADIUS configuration mode
[Syntax]
radius-server local-profile
[Input mode]
global configuration mode
[Description]
Switches to the RADIUS configuration mode.
This mode is used to configure the operating specifications for the local RADIUS server function.
[Example]
Switches to the RADIUS configuration mode.
SWR2311P(config)#radius-server local-profile
SWR2311P(config-radius)#
10.1.5 Authentication method settings
[Syntax]
authentication mode [mode..
.]
no
authentication
[Parameter]
mode : Authentication method
Command Reference | Application | 283