configure syslog tls ocspNEW!

configure syslog tls ocsp [on | off]

Description

Enables or disables Online Certificate Status Protocol (OCSP) check for Transport Layer Security (TLS) connections to remote Syslog servers.

Syntax Description

syslog Specifies configuring the remote Syslog target.
tls Specifies configuring TLS.
ocsp Specifies configuring OCSP for real-time certificate revocation status checking.
on Enables OCSP (default).
off Disables OCSP.

Default

By default, OCSP is enabled.

Usage Guidelines

While you can disable OCSP, it is not recommended because no certificate revocation status check is performed.

Example

The following example enables OCSP check for TLS connections to remote Syslog servers.

# configure syslog tls ocsp on

History

This command was first available in ExtremeXOS 30.7.

Platform Availability

This command is available on the ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X670-G2, X690, X695, and X870 series switches.