When you are trying to apply directly, it is trying to resolve realm-cisco.pub.key to an IP address. You can ignore this. If you try to load the IPS image, it will succeed. The key is used authenticate the signed signature package that we are trying to load.
If you look below, king translation failed and kings had been translated to 1.2.3.4 router#sh crypto key pubkey-chain rsa Codes: M - Manually configured, C - Extracted from certificate Code Usage IP-Address/VRF Keyring Name M Signing default king M General 1.2.3.4 default kings If your signature uploads fails informing that there is no valid key, then it's an issue. Are you able to load signature package successfully? With regards Kings On Fri, May 20, 2011 at 11:52 AM, <[email protected]> wrote: > Hi King, > > > thanks for the respond. Here is what I do: > > > crypto key gen rsa exportable gerneral-keys > > crypto key pubkey-chain rsa > R2(config-pubkey-chain)#named-key realm-cisco.pub.key signature > Translating "realm-cisco.pub.key"...domain server (255.255.255.255) > > > Even when I use the command: > > > R2(config-pubkey-chain)#named-key realm-cisco.pub signature > > > Im getting this translation failure. I shouldnt get it. > > > I copied the File to the flash. When I use: > > > R2(config-pubkey-chain)#named-key flash:realm-cisco.pub.key signature > > > it seems to work. Im wondering why .... it should work without flash: > > > Im using a Cisco 1841 with c1841-advsecurityk9-mz.124-15.T9.bin > > > > Maybe you can give me a tip ? > > > > Thanks, > > > bobby > > > > ----- Ursprüngliche Nachricht ----- > Von: Kingsley Charles > Gesendet: 20.05.11 08:03 Uhr > An: Robert Gridley > Betreff: Re: [OSL | CCIE_Security] (no subject) > > What is the issue exactly? > > With regards > Kings > > On Thu, May 19, 2011 at 11:56 PM, Robert Gridley <[email protected]> wrote: > >> Thanks Adil, but it didnt work. still got the failure. >> >> >> Somebody a solution for me ? >> >> regards, >> >> robert >> >> >> >> ----- Original Message ----- >> *From:* [email protected] >> *To:* CCIE Security Group Study >> Ccie_security<[email protected]> >> *Sent:* Thursday, May 19, 2011 2:54 PM >> *Subject:* [OSL | CCIE_Security] [OSL-Security] >> >> Hi, >> >> >> I got another question for you: >> >> >> Im configuring IPS for IOS and I was doing the following steps: >> >> >> crypto key pubkey-chain rsa >> >> R2(config-pubkey-chain)#named-key realm-cisco.pub.key signature >> Translating "realm-cisco.pub.key"...domain server (255.255.255.255) >> >> >> >> When i use: >> >> >> named-key flash:realm-cisco.pub.key signature >> >> >> it works. >> >> Im wondering if its right because in every config I found there was >> nothing with flash: >> >> >> Somebody know whats wrong ? >> >> >> Thanks, >> >> >> bobby >> >> >> _______________________ >> >> Robert Gridley >> >> Email: [email protected] >> >> ------------------------------ >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> >> >> _______________________________________________ >> For more information regarding industry leading CCIE Lab training, please >> visit www.ipexpert.com >> >> Are you a CCNP or CCIE and looking for a job? Check out >> www.PlatinumPlacement.com >> > > > > > _______________________ > > Robert Gridley > > Email: [email protected] >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
