Configure AOS with the following commands: 1. crypto pki csr ec curve_name secp384r1 common_name country state_or_province city organization unit email show crypto pki csr 2. Use DOD PKI to generate a public certificate based on the CSR. 3. Using the web GUI, navigate to Configuration >> System >> Certificates >> Import Certificates. 4. Click the plus sign (+) and enter "Certificate name:", browse to the public certificate file, choose the appropriate format, select Certificate type: "ServerCert", and click "Submit". 5. Click Pending Changes >> Deploy Changes. Continue configuring with the CLI: configure terminal crypto-local isakmp ca-certificate crypto-local isakmp certificate-group server-certificate ca-certificate write memory crypto dynamic-map version v2 set pfs group20 set transform-set default-gcm256 set security-association lifetime seconds 28800 exit write memory aaa authentication-server radius host key enable exit write memory aaa server-group auth-server exit write memory ip access-list session any any any permit ipv6 any any any permit exit write memory user-role access-list session exit write memory aaa authentication via auth-profile default-role client-cert-enable server-group exit write memory aaa authentication via connection-profile auth-profile enable-fips ikev2-policy 10009 ikev2-proto ikev2auth eap-tls ipsecv2-cryptomap map number max-timeout value <0-65535> suiteb-crypto validate-server-cert exit write memory aaa authentication via web-auth default auth-profile exit write memory user-role via exit write memory

Detections

Analytics

Item Search