[EMAIL PROTECTED] wrote:
> Install the latest version of IOS for the specific model being tested.  Cisco is
> gradually creating a better certificate-based IPSec system.  I understand that 
>several
> refinements are being introduced to the certificate management process.

Well the problem is that the 3640 I have has only 8Mb of Flash and latest IOS 
versions (12.1+) requires at least 16Mb to be installed... sigh. Anyway we 
installed the 12.0.24 general deployment version... I hope this has no problem
with the SCEP itself... my actual goal is to include it into OpenCA... setting
up a VPN is currently out of my plans right now...

> SCEP is a very simple on-line protocol.  To request certificates, it is first 
>necessary
> to install the root CA certificate.  Have that available.  We did all our requests

I found some commands to generate rsa keys... am I supposed to generate the 
key pair before requesting the certificate or it will be automatically 
generated when using SCEP ?

[...]
> Cisco has different IOS versions for each model.  For me to provide a specific IOS
> version would apply only to one particular model.  We did not use the 36XX routers, 
>but
> they are very similar to the 30XX series, IIRC.

Thanks for all the help you could give, I'll check also the cisco's website
as a source of helpful infos...

-- 

C'you,

        Massimiliano Pala

--o-------------------------------------------------------------------------
Massimiliano Pala [OpenCA Project Manager]                [EMAIL PROTECTED]
                                                      [EMAIL PROTECTED]
http://www.openca.org                            Tel.:   +39 (0)59  270  094
http://openca.sourceforge.net                    Mobile: +39 (0)347 7222 365



-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
OpenCA-Devel mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-devel

Reply via email to