subjectAltName

Configures the subjectAltName identity for this CMP policy

Supported in the following platforms:

  • Access Points — AP505i, AP510i/e, AP560i/h
  • Service Platforms — NX5500, NX7500, NX9500, NX9600, VX9000

Syntax

subjectAltName [address <IP>|dn <DISTINGUISHED-NAME>|email <EMAIL-ID>|fqdn <FQDN>|
string <USER-DEFINED-STRING>]

    

Parameters

subjectAltName [address <IP>|dn <DISTINGUISHED-NAME>|email <EMAIL-ID>|fqdn <FQDN>|
string <USER-DEFINED-STRING>]
subjectAltName [address <IP>|dn <DISTINGUISHED-NAME>|email <EMAIL-ID>|fqdn <FQDN>|string <USER-DEFINED-STRING>] Configures an alternative name (disguise) for the subject using one of the following options:
  • address <IP> – Uses IP address as identity
    • <IP> – Specify the IP address.
  • dn <DISTINGUISHED-NAME> – Uses distinguished name as identity
    • <DISTINGUISHED-NAME> – Specify the DISTINGUISHED-NAME.
  • email <EMAIL-ID> – Uses e-mail address as identity
    • <EMAIL-ID> – Specify the e-mail address.
  • fqdn <FQDN> – Uses FQDN as identity
    • <FQDN> – Specify the FQDN.
  • string <USER-DEFINED-STRING> – Uses a user specified name as identity
    • <USER-DEFINED-STRING> – Specify the string to use as identity.
Note: The alternative name value should not exceed 128 characters.

Examples

ap505-D8273A(config-cmp-policy-CMP)#subjectAltName dn TechPubsCA
ap505-D8273A(config-cmp-policy-CMP)#show context
crypto-cmp-policy CMP
 cert-update
 cert-renewal-timeout 60
 ca-server primary host 192.168.8.74 port 8 path cmp
 subjectAltName dn TechPubsCA
ap505-D8273A(config-cmp-policy-CMP)#

Related Commands

no Removes the subjectAltName identity configured with this CMP policy