topic Thank you for answer Philip in Network Access Control

Self-signed certificate transfer

Jaro — Mon, 11 Mar 2019 07:36:03 GMT

Hello,

I need to create authentication certificate for SSL VPN on cisco router 2901(Version 15.5(1)T2 ).

And then client should take certificate via http.

On cisco ASA it is easy but, I don´t know how and if it is possible to create this type of certificate and how can I transfer it, but best way for ssl client will be via http.

Notice : This is only to TEST purpose.

Thank you very much for your help.

I've written a guide for

Philip D'Ath — Tue, 04 Apr 2017 01:48:59 GMT

I've written a guide for deploying AnyConnect using IKEv2 with Suite-B cryptography.

In your case, if you only use the bit to do with certificates you should get what you need.
http://www.ifm.net.nz/cookbooks/Cisco-IOS-router-IKEv2-AnyConnect-Suite-B-Crypto.html

Thank you for answer Philip

Jaro — Tue, 04 Apr 2017 15:27:02 GMT

Thank you for answer Philip but, if client will need obtain certificate which site should he/she use?

when I try it on ASA there was this website: https://<ASA IP/FQDN>/+CSCOCA+/enroll.html

but how it is with cisco router.

Thank you

The IOS CA does not support

Philip D'Ath — Tue, 04 Apr 2017 18:52:34 GMT

The IOS CA does not support that method.

You need to copy them off the router and then give them to the user, like in my article.

Thank you Philip, I want to

Jaro — Fri, 07 Apr 2017 14:35:03 GMT

Thank you Philip, I wanted to hear this. Do you have some document about that, because I´m writing Master Thesis and I need some confirmation of that or how can I find it, what is that method called ?

Thank you

There is the document I wrote

Philip D'Ath — Fri, 07 Apr 2017 19:01:09 GMT

There is the document I wrote which I provided a link to ...

Hi Philip,

Jaro — Wed, 12 Apr 2017 12:33:06 GMT

Hi Philip,

No, I mean document which will say that, I can not do transfer of SSL certificate by https link.And second question is that what is that method of transfer certificate called or only transfer by https, how to find it?

Thanks