Configuring CA Support

When you decide you will be using a CA to support your IPSec implementation, you first need to decide what type of CA you will use: a local CA administered by your staff or a remote CA administered by the CA company. Either way, once you decide on CA usage, you need to make sure your router is set up to use it.

Managing NVRAM

Cisco IOS routers usually have a limited amount of NVRAM. NVRAM is the nonvolatile portion of memory where your saved configuration is stored. Knowing the amount of NVRAM is crucial because NVRAM is the location where your digital certificates along with other items are stored.

If you have a very large configuration or other files that take up most of your NVRAM, you can still use digital certificates. ...

Get SECUR Exam Cram™ 2 (Exam 642-501) now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.