certificates in router

donnie · ‎08-18-2010

Hi all,

I have a cisco 1811 router which has site to site vpn configured with 1 of my regional office. From the router config i can establish which are the phase 1 and phase2 configuration. However i see certificate info as below. How can i tell if the self sign certificate info below is being used by my router at all? Thks in advance.

crypto pki trustpoint test
enrollment selfsigned
subject-name cn=test2

revocation-check none
rsakeypair test
!
!
crypto pki certificate chain test
certificate self-signed 01
xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

quit

Asim Malik · ‎08-18-2010

Hi Don,

Check to see where you have associated the trustpoint test, for example ike this

crypto isakmp profile l2lvpn
   ca trust-point test

donnie · ‎08-18-2010

Hi Asimalik,

There is no association for the trustpoint test throughout the config from i what see including the IKE config under crypto isakmp.

Hence i believe the CA is not in use. Thks.