Vyatta NOS documentation

Learn how to install, configure, and operate Vyatta Network Operating System (Vyatta NOS), which helps to drive our virtual networking and physical platforms portfolio.

security vpn ipsec site-to-site peer <peer> authentication x509 crl-file <file-name>

Specifies the name of an X.509 Certificate Revocation List (CRL) file for IPsec authentication of the VPN peer.

set security vpn ipsec site-to-site peer peer authentication x509 crl-file file-name
delete security vpn ipsec site-to-site peer peer authentication x509 crl-file
show security vpn ipsec site-to-site peer peer authentication x509 crl-file
peer
Mandatory. The address of the far-end VPN gateway. The format is an IPv4 address, an IPv6 address, a hostname (IPv4 networks only), an authentication ID, or 0.0.0.0.
file-name
The name of the CRL file.

Configuration mode

security {
        vpn {
            ipsec {
            site-to-site {
                peer peer {
                    authentication {
                        x509 {
                            crl-file file-name
                        }
                    }
                }
            }
        }
    }
}

Use this command to specify the name of a Certificate Revocation List (CRL) file.

A CRL is a time-stamped signed data structure issued by the Certificate Authority (CA) identifying revoked certificates. When the remote user attempts to log on to the system, the system checks both the remote user's certificate signature and also the CRL to make sure that the remote user's certificate serial number is not on the CRL. If it is, the login attempt will be refused.

The file is assumed to be in /config/auth unless an absolute path is specified.

Use the set form of this command to specify the name of the CRL file.

Use the delete form of this command to remove the name of the CRL file.

Use the show form of this command to display CRL file configuration.