Configure a RADIUS Secure Profile

Configure a RADIUS Security (RADSec) profile to specify certificate information used by RADSec to develop trust between peers. You can also specify a password used for RADSec encryption.

Note

Note

Secure profile is not supported on VSP 8600 Series.

About this task

All the files (certificates and keys) must be in .pem format and copy it to flash /intflash directory.

A new profile directory is created for each new profile in the flash/intflash/.radsec/profile/radsec directory.

Profile configuration file “profile_info.cfg” is available in /intflash/.radsec/profile directory.

You can configure a maximum of 10 RADsec profiles.

Procedure

  1. In the navigation pane, expand Configuration > Security > Control Path.
  2. Select RADIUS.
  3. Select the Secure Certificate Profile
  4. Select Insert.
  5. For Name, enter the name for the profile.
  6. For RootCert, enter the full path for the profile root certificate.
  7. For Cert, enter the full path for the profile certificate.
  8. For Key, enter the full path for the profile private key.
  9. For Password, enter the full path to decrypt the profile private key.
  10. For RootCertDestFile, enter the file name to use when installing the root certificate.
  11. For CertDestFile, enter the file name to use when installing the certificate.
  12. For KeyDestFile, enter the file name to use when installing the key.
  13. Select Insert.

Secure Certificate Profile Field Descriptions

Use the data in the following table to use the Secure Certificate Profile tab.

Name Description
Name

Specifies the profile name.

RootCert

Specifies the full path of the profile root certificate.

Cert

Specifies the full path of the profile certificate.

Key

Specifies the full path of the profile private key.

Password

Specifies the password used to decrypt the profile private key.

RootCertDestFile

Specifies the file name to use when installing the root certificate.

CertDestFile

Specifies the file name to use when installing the certificate.

KeyDestFile

Specifies the file name to use when installing the key.