PKI策略调用

[huihuxu735715]

在客户路由器上看到的命令，没看明白什么意思，有大佬出来解释一下嘛
crypto pki trustpoint TP-self-signed-1885484259
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1885484259
revocation-check none
rsakeypair TP-self-signed-1885484259

crypto pki certificate chain TP-self-signed-1885484259
certificate self-signed 01 nvram:IOS-Self-Sig#2.cer
voice-card 0

[huihuxu735715]

我想问的是，我需要把这台路由器的配置导入到新的路由器上，我看这些命令好像是自动生成的，如果是自动生成的，我还需要把这些配置导入到新的上吗

[wuhao0015]

这个是各自签名证书，没有做证书认证的话可忽略。

[Rockyw]

楼主参考一下下面的文档
思科交换机crypto pki trustpoint TP-self-signed-18999761
https://blog.51cto.com/8189171/2063217

[Rockyw]

更为详细的解释可以看下面这篇文档
Solved: crypto pki trustpoint TP-self-signed
https://community.cisco.com/t5/switching/crypto-pki-trustpoint-tp-self-signed/td-p/1939051