NGFW Command Line Interface Reference 121
Example
NGFW{running-certificates-crl}help add
Valid commands are:
# Enter context
addressgroups
# Other commands
add CANAME local-import|(uri CRLURI)
NGFW{running-certificates-crl}cache
Enable or disable CRL cache fetched via HTTP.
Syntax
cache (enable|disable)
Example
NGFW{running-certificates-crl}cache enable
NGFW{running-certificates-crl}delete
Delete a CRL URI or file for a specified Certificate Authority.
Syntax
delete crl (all|CANAME)
Valid entries:
all Delete all CRL URIs and local files
CANAME Delete CRL URI and local files for this Certificate Authority.
Example
NGFW{running-certificates-crl}delete crl all
NGFW{running-certificates-crl}mode
Set certificate revocation mode.
Syntax
mode (required|optional)
Valid entries:
required Fail authentication by certificate if CRL cannot be verified
optional Allow authentication by certificate if CRL cannot be verified
Example
NGFW{running-certificates-crl}mode required
running-cluster Context Commands
NGFW{running}cluster
NGFW{running-cluster}check
Perform consistency check.
Syntax
check CHECK_TYPE (enable|disable)
Commentaires sur ces manuels