crl-check

Enables a CRL check on this RADIUS server policy. A CRL is a list of revoked certificates issued and subsequently revoked by a CA (Certification Authority). Certificates can be revoked for a number of reasons including failure or compromise of a device using a certificate, a compromise of a certificate key pair or errors within an issued certificate. The mechanism used for certificate revocation depends on the CA.

This option is disabled by default.

Supported on the following devices:

Syntax

crl-check

Parameters

None

Examples

nx9500-6C8809(config-radius-server-policy-test)#crl-check
nx9500-6C8809(config-radius-server-policy-test)#show context
radius-server-policy test
 authentication eap-auth-type tls
 crl-check
nx9500-6C8809(config-radius-server-policy-test)#

Related Commands

no

Disables CRL check on a RADIUS server policy