Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

security vpn ipsec site-to-site peer <peer> authentication x509 ca-cert-file <file-name>

Specifies the name of an X.509 Certificate Authority (CA) certificate file for IPsec authentication of the VPN peer.

set security vpn ipsec site-to-site peer peer authentication x509 ca-cert-file file-name
delete security vpn ipsec site-to-site peer peer authentication x509 ca-cert-file
show security vpn ipsec site-to-site peer peer authentication x509 ca-cert-file
peer
Mandatory. The address of the far-end VPN gateway. The format is an IPv4 address, an IPv6 address, a hostname (IPv4 networks only), an authentication ID, or 0.0.0.0.
file-name
The certificate file name. This parameter is mandatory if authentication mode is x509.

Configuration mode

security {
        vpn {
            ipsec {
            site-to-site {
                peer peer {
                    authentication {
                        x509 {
                            ca-cert-file file-name
                        }
                    }
                }
            }
        }
    }
}

Use this command to specify the name of an X.509 Certificate Authority (CA) certificate file. The X.509 CA certificate is used for IPsec authentication for the VPN peer.

Certificate and key files are assumed to be in /config/auth unless an absolute path is specified.

Use the set form of this command to specify the name of the CA certificate file.

Use the delete form of this command to remove the name of the CA certificate file.

Use the show form of this command to display CA certificate file configuration.