RSA key size: 512 Bits
Key Label: CA-CCIE
Any Passphrase: CCIESEC3
Encryption: 3DES
Key Location: NVRAM
Issure Name: CN=CA-CCIE.Cisco.com L=ND C=IN
IOS SERVER CONFIGURATION:
note: Ensure your router clock is sync with all routers
!
ip domain-name cisco.com
!
crypto key generate rsa general-keys label CA-CCIE exportable
crypto key export rsa CA-CCIE pem url nvram 3des CCIESEC3
!
ip http server
!
crypto pki server CA-CCIE
database url nvram:
issuer-name CN=CA-CCIE.Cisco.com L=ND C=IN
grant auto
no shut
ENROLL A ROUTER (client) TO CA SERVER
!
ip domain-name cisco.com
!
crypto key generate rsa
!
crypto ca trustpoint CA-CCIE
enrollment url http://150.1.5.5:80
revocation-check none
!
crypto ca authenticate CA-CCIE
!
crypto ca enroll CA-CCIE
password:CCIESEC3
re-enter password:CCIESEC3
DOC-CD
Technology
+ Security and VPN
+ IPSec Negotiation/IKE Protocols
+ Configuration Examples and TechNotes
+Dynamic LAN-to-LAN VPN between Cisco IOS Routers Using IOS CA on the Hub Configuration Example
