1. Administrative Security Guide
  2. Configuring IKEv2 Interfaces
  3. Online Certificate Status Protocol
  4. OCSP-Based Certificate Verification

OCSP-Based Certificate Verification

The following sections provides instruction on using the ACLI to configure OCSP-based certificate verification.

Configuration of OCSP-based certificate verification is a three-step process.

  1. Specify the information and cryptological resources required to access one or more OSCP responders.
  2. Enable OCSP on an IKEv2 interface.
  3. Associate one or more OCSP responders with an IKEv2 interface.