Table of Contents
Advertisement
▀ Configuring Optional Features on the P-GW
The PEM-formatted data for the certificate and CA certificate can be specified, or the information can be read
from a file via a specified URL as shown in this example.
When creating the crypto template for IPSec in Context Configuration Mode, bind the X.509 certificate and CA
certificate to the crypto template and enable X.509 certificate-based peer authentication for the local and remote nodes,
as follows:
configure
context <pgw_context_name> -noconfirm
crypto template <crypto_template_name> ikev2-dynamic
certificate name <cert_name>
ca-certificate list ca-cert-name <ca_cert_name>
authentication local certificate
authentication remote certificate
end
Notes:
A maximum of 16 certificates and 16 CA certificates are supported per system. One certificate is supported per
service, and a maximum of four CA certificates can be bound to one crypto template.
The
certificate name
certificate to the crypto template.
The
authentication local certificate
enable X.509 certificate-based peer authentication for the local and remote nodes.
▄ Cisco ASR 5x00 Packet Data Network Gateway Administration Guide
198
and
ca-certificate list ca-cert-name
and
authentication remote certificate
PDN Gateway Configuration
commands bind the certificate and CA
commands
Advertisement
Table of Contents
