Generating An Ikev2 Digital Certificate; Enabling Ikev2 Preshared Key Authentication - Lenovo RackSwitch G8264 Application Manual

Generating an IKEv2 Digital Certificate

1. Create an HTTPS certificate defining the information you want to be used in the
2. Save the HTTPS certificate.
3. Enable IKEv2 RSA‐signature authentication:

Enabling IKEv2 Preshared Key Authentication

1. Enter the local preshared key.
2. If asymmetric authentication is supported, enter the remote key:
3. Set up the IKEv2 identification type by entering one of the following commands:
482
G8264 Application Guide for ENOS 8.4
To create an IKEv2 digital certificate for authentication:
various fields.
RS G8264(config)# access https generate­certificate
Country Name (2 letter code) [US]:
State or Province Name (full name) [CA]:
Locality Name (eg, city) [Santa Clara]:
Organization Name (eg, company) [Lenovo]:
Organizational Unit Name (eg, section) [Engineering]:
Common Name (eg, YOUR name) [10.240.226.241]:
Email (eg, email address) []:
Confirm generat'eywing certificate? [y/n]: y
Generating certificate. Please wait (approx 30 seconds)
restarting SSL agent
The certificate is valid only until the switch is rebooted. To save the certificate so
that it is retained beyond reboot or power cycles, use the following command:
RS G8264(config)# access https save­certificate
RS G8264(config)# access https enable
To set up IKEv2 preshared key authentication:
RS G8264(config)# ikev2 preshare­key local <preshared key, a string of 1‐256 chars>
RS G8264(config)# ikev2 preshare­key remote <preshared key> <IPv6 host>
where the following parameters are used:
 preshared key
 IPv6 host
RS G8264(config)# ikev2 identity local address (use an IPv6 address)
RS G8264(config)# ikev2 identity local email <email address>
RS G8264(config)# ikev2 identity local fqdn <domain name>
To disable IKEv2 RSA‐signature authentication method and enable preshared key
authentication, enter:
RS G8264(config)# access https disable
A string of 1‐256 characters
An IPv6‐format host, such as "3000::1"