Cisco MDS 9000 Series Configuration Manual page 9

C H A P T E R 7
Configuring Certificate Authorities and Digital Certificates
Defining IPv4-ACLs 105
Defining IPv6-ACLs
106
Operand and port options for an IPv4-ACL
Operand and port options for an IPv6-ACL
Adding IP Filters to an Existing IPv4-ACL
Adding IP Filters to an Existing IPv6-ACL
Removing IP Filters from an Existing IPv4-ACL
Removing IP Filters from an Existing IPv6-ACL
Verifying the IPv4-ACL or IPv6-ACL Configuration
Reading the IP-ACL Log Dump
Applying an IP-ACL to an Interface
Applying an IPv6-ACL to an Interface
Applying an IP-ACL to mgmt0
Verifying Interface IP-ACL Configuration
Open IP Ports on Cisco MDS 9000 Series Platforms
IP-ACL Counter Cleanup
About CAs and Digital Certificates
Purpose of CAs and Digital Certificates
Trust Model, Trust Points, and Identity CAs
RSA Key-Pairs and Identity Certificates
Multiple Trusted CA Support
PKI Enrollment Support
Manual Enrollment Using Cut-and-Paste Method
Multiple RSA Key-Pair and Identity CA Support
Peer Certificate Verification
CRL Downloading, Caching, and Checking Support
Import and Export Support for Certificates and Associated Key-Pairs
Configuring CAs and Digital Certificates
Configuring the Host Name and IP Domain Name
Generating an RSA Key-Pair
Creating a Trust Point CA Association
Authenticating the CA
123
106
107
107
108
108
109
109
110
111
112
113
113
114
115
117
117
118
118
119
119
120
120
120
121
121
122
122
Cisco MDS 9000 Series Security Configuration Guide, Release 8.x
117
120
121
Contents
ix