Configure a RADIUS Secure Profile

Configure a RADIUS Security (RADSec) profile to specify certificate information used by RADSec to develop trust between peers. You can also specify a password used for RADSec encryption.

Note

Secure profile is not supported on VSP 8600 Series.

About this task

All the files (certificates and keys) must be in .pem format and copy it to flash /intflash directory.

A new profile directory is created for each new profile in the flash/intflash/.radsec/profile/radsec directory.

Profile configuration file “profile_info.cfg” is available in /intflash/.radsec/profile directory.

You can configure a maximum of 10 RADsec profiles.

Procedure

In the navigation pane, expand Configuration > Security > Control Path.
Select RADIUS.
Select the Secure Certificate Profile
Select Insert.
For Name, enter the name for the profile.
For RootCert, enter the full path for the profile root certificate.
For Cert, enter the full path for the profile certificate.
For Key, enter the full path for the profile private key.
For Password, enter the full path to decrypt the profile private key.
For RootCertDestFile, enter the file name to use when installing the root certificate.
For CertDestFile, enter the file name to use when installing the certificate.
For KeyDestFile, enter the file name to use when installing the key.
Select Insert.

Secure Certificate Profile Field Descriptions

Use the data in the following table to use the Secure Certificate Profile tab.


Name	Description
Name	Specifies the profile name.
RootCert	Specifies the full path of the profile root certificate.
Cert	Specifies the full path of the profile certificate.
Key	Specifies the full path of the profile private key.
Password	Specifies the password used to decrypt the profile private key.
RootCertDestFile	Specifies the file name to use when installing the root certificate.
CertDestFile	Specifies the file name to use when installing the certificate.
KeyDestFile	Specifies the file name to use when installing the key.