User Manual

Table Of Contents
(within 3–32 characters; cannot specify “DEFAULT”)
Authentication method Characters that can be inputted
EAP-MD5, EAP-TTLS, PEAP, PAP
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] " ? and
spaces
EAP-TLS
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] / : * | < >
" ? and spaces
certificate-id : Client certificate ID
Combination of “user ID” and “serial number”
[Input mode]
privileged EXEC mode
[Description]
This revokes client certificates for specified users or client certificate IDs.
In the event that a client certificate is revoked, the authorization using that certificate will fail.
[Note]
Client certificate IDs (certificate-id) can be checked using the show radius-server local certificate list command.
[Example]
This revokes the client certificate for user ID “Taro”.
SWX3220#certificate revoke user Taro
This revokes the client certificate for client certificate ID “Taro-DF598EE9B44D22CC”.
SWX3220#certificate revoke id Taro-DF598EE9B44D22CC
10.4.13 Exporting client certificates (copying to SD card)
[Syntax]
certificate export sd all [compress]
certificate export sd user userid [compress]
[Keyword]
all : Exporting client certificates for all users
user : Exporting client certificates for specified users
compress : Compress into a ZIP file
[Parameter]
userid : User ID
(within 3–32 characters; cannot specify “DEFAULT”)
Authentication method Characters that can be inputted
EAP-MD5, EAP-TTLS, PEAP, PAP
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] " ? and
spaces
EAP-TLS
Single-byte alphanumeric characters and
symbols other than the characters \ [ ] / : * | < >
" ? and spaces
[Input mode]
privileged EXEC mode
[Description]
This exports the client certificates to an SD card.
The certificates will be exported to the /swx3220/certification/ folder on the SD card.
Command Reference | Application | 471