Panasonic NN46110-600 - Manual (Page 7)

Contents 3
External LDAP proxy..................................................................................................... 74
Configurable warning time for certificate expiration......................................................74
VPN security using digital certificates ................................................................................. 75
Setting up public key infrastructure (PKI).............................................................................75
CA and X.509 certificates .............................................................................................75
Loading certificates ..................................................................................................... 75
Generating a server certificate request......................................................................... 76
Installing server certificates using cut and paste #7 and #10 ......................................76
Installing server certificates using CMP........................................................................ 77
Installing trusted CA certificates...........................................................................................79
Setting certificate parameters ............................................................................................. 80
Trusted CA certificate settings............................................................................................. 82
Group assignment by user identification ......................................................................82
Allow All policy ............................................................................................................. 82
Access control by Subject DN....................................................................................... 83
Group and certificate association configuration .......................................................... 84
CA key update .................................................................................................................... 84
Configuring a certificate revocation list (CRL) .................................................................... 86
Configuring CRL servers............................................................................................... 87
Configuring CRL Retrieval Scheduling ..................................................................88
CRL distribution points ....................................................................................................... 90
CRL retrieval ........................................................................................................................92
Enabling certificate use for tunnels .............................................................................. 92
Identifying individual users with certificates.................................................................. 93
Identifying branch offices with certificates.................................................................... 94
IPsec authentication ..................................................................................................... 94
L2TP/IPsec authentication............................................................................................ 96
Index.................................................................................................................................... 97
Nortel VPN Router Security — Servers, Authentication, and Certificates