Enable Certificate Verification on an IKEv2 Interface

1. Access the ike-interface configuration element.

   ORACLE# configure terminal
   ORACLE(configure)# security
   ORACLE(security)# ike
   ORACLE(ike)# ike-interface
   ORACLE(ike-interface)# 

2. Select the ike-interface object to edit.

   ORACLE(ike-interface)# select
   <address>:
   
   ORACLE(ike-interface)#

3. cert-status-check—Enable certificate status checking on this IKEv2 interface.
4. cert-status-profile-list—Assign a CRL source or sources to the IKEv2 interface

   Note:

   Use quotation marks to assign multiple CRL sources.

   ORACLE(ike-interface)# cert-status-profile-list "CRL1-VS CRL2-VS CRL3-VS"
   ORACLE(ike-interface)#

5. Type done to save your configuration.