The following example shows the part of the running configuration of a router that is configured to have IPS signatures automatically upgraded from Cisco.com. In this example, the distinct CA trustpoints "root" and "sub-root" are configured.
ida-client server url https://www.cisco.com/cgi-bin/front.x/ida/locator/locator.pl
ip domain name yourdomain.com
ip name-server 192.168.200.10
ip ips config location flash:/ips retries 1 timeout 1
ip ips notify SDEE
ip ips name IPS
!
ip ips signature-category
category all
retired true
category ios_ips basic
retired false
!
password encryption aes
!
crypto pki trustpoint root
enrollment terminal
revocation-check none
!
crypto pki trustpoint sub-root
enrollment terminal
revocation-check none
!
crypto pki certificate chain root
certificate ca 18DAD19E267DE8BB4A2158CDCC6B3B4A
308204D3 308203BB A0030201 02021018 DAD19E26 7DE8BB4A 2158CDCC 6B3B4A30
0D06092A 864886F7 0D010105 05003081 CA310B30 09060355 04061302 55533117
30150603 55040A13 0E566572 69536967 6E2C2049 6E632E31 1F301D06 0355040B
13165665 72695369 676E2054 72757374 204E6574 776F726B 313A3038 06035504
0B133128 63292032 30303620 56657269 5369676E 2C20496E 632E202D 20466F72
20617574 686F7269 7A656420 75736520 6F6E6C79 31453043 06035504 03133C56
65726953 69676E20 436C6173 73203320 5075626C 69632050 72696D61 72792043
65727469 66696361 74696F6E 20417574 686F7269 7479202D 20473530 1E170D30
36313130 38303030 3030305A 170D3336 30373136 32333539 35395A30 81CA310B
30090603 55040613 02555331 17301506 0355040A 130E5665 72695369 676E2C20
496E632E 311F301D 06035504 0B131656 65726953 69676E20 54727573 74204E65
74776F72 6B313A30 38060355 040B1331 28632920 32303036 20566572 69536967
6E2C2049 6E632E20 2D20466F 72206175 74686F72 697A6564 20757365 206F6E6C
79314530 43060355 0403133C 56657269 5369676E 20436C61 73732033 20507562
6C696320 5072696D 61727920 43657274 69666963 6174696F 6E204175 74686F72
69747920 2D204735 30820122 300D0609 2A864886 F70D0101 01050003 82010F00
3082010A 02820101 00AF2408 08297A35 9E600CAA E74B3B4E DC7CBC3C 451CBB2B
E0FE2902 F95708A3 64851527 F5F1ADC8 31895D22 E82AAAA6 42B38FF8 B955B7B1
B74BB3FE 8F7E0757 ECEF43DB 66621561 CF600DA4 D8DEF8E0 C362083D 5413EB49
CA595485 26E52B8F 1B9FEBF5 A191C233 49D84363 6A524BD2 8FE87051 4DD18969
7BC770F6 B3DC1274 DB7B5D4B 56D396BF 1577A1B0 F4A225F2 AF1C9267 18E5F406
04EF90B9 E400E4DD 3AB519FF 02BAF43C EEE08BEB 378BECF4 D7ACF2F6 F03DAFDD
75913319 1D1C40CB 74241921 93D914FE AC2A52C7 8FD50449 E48D6347 883C6983
CBFE47BD 2B7E4FC5 95AE0E9D D4D143C0 6773E314 087EE53F 9F73B833 0ACF5D3F
3487968A EE53E825 15020301 0001A381 B23081AF 300F0603 551D1301 01FF0405
30030101 FF300E06 03551D0F 0101FF04 04030201 06306D06 082B0601 05050701
0C046130 5FA15DA0 5B305930 57305516 09696D61 67652F67 69663021 301F3007
06052B0E 03021A04 148FE5D3 1A86AC8D 8E6BC3CF 806AD448 182C7B19 2E302516
23687474 703A2F2F 6C6F676F 2E766572 69736967 6E2E636F 6D2F7673 6C6F676F
2E676966 301D0603 551D0E04 1604147F D365A7C2 DDECBBF0 3009F343 39FA02AF
33313330 0D06092A 864886F7 0D010105 05000382 01010093 244A305F 62CFD81A
982F3DEA DC992DBD 77F6A579 2238ECC4 A7A07812 AD620E45 7064C5E7 97662D98
097E5FAF D6CC2865 F201AA08 1A47DEF9 F97C925A 0869200D D93E6D6E 3C0D6ED8
E6069140 18B9F8C1 EDDFDB41 AAE09620 C9CD6415 3881C994 EEA28429 0B136F8E
DB0CDD25 02DBA48B 1944D241 7A05694A 584F60CA 7E826A0B 02AA2517 39B5DB7F
E784652A 958ABD86 DE5E8116 832D10CC DEFDA882 2A6D281F 0D0BC4E5 E71A2619
E1F4116F 10B595FC E7420532 DBCE9D51 5E28B69E 85D35BEF A57D4540 728EB70E
6B0E06FB 33354871 B89D278B C4655F0D 86769C44 7AF6955C F65D3208 33A454B6
183F685C F2424A85 3854835F D1E82CF2 AC11D6A8 ED636A
quit
crypto pki certificate chain sub-root
certificate ca 6ECC7AA5A7032009B8CEBCF4E952D491
308205EC 308204D4 A0030201 0202106E CC7AA5A7 032009B8 CEBCF4E9 52D49130
0D06092A 864886F7 0D010105 05003081 CA310B30 09060355 04061302 55533117
30150603 55040A13 0E566572 69536967 6E2C2049 6E632E31 1F301D06 0355040B
13165665 72695369 676E2054 72757374 204E6574 776F726B 313A3038 06035504
0B133128 63292032 30303620 56657269 5369676E 2C20496E 632E202D 20466F72
20617574 686F7269 7A656420 75736520 6F6E6C79 31453043 06035504 03133C56
65726953 69676E20 436C6173 73203320 5075626C 69632050 72696D61 72792043
65727469 66696361 74696F6E 20417574 686F7269 7479202D 20473530 1E170D31
30303230 38303030 3030305A 170D3230 30323037 32333539 35395A30 81B5310B
30090603 55040613 02555331 17301506 0355040A 130E5665 72695369 676E2C20
496E632E 311F301D 06035504 0B131656 65726953 69676E20 54727573 74204E65
74776F72 6B313B30 39060355 040B1332 5465726D 73206F66 20757365 20617420
68747470 733A2F2F 7777772E 76657269 7369676E 2E636F6D 2F727061 20286329
3130312F 302D0603 55040313 26566572 69536967 6E20436C 61737320 33205365
63757265 20536572 76657220 4341202D 20473330 82012230 0D06092A 864886F7
0D010101 05000382 010F0030 82010A02 82010100 B187841F C20C45F5 BCAB2597
A7ADA23E 9CBAF6C1 39B88BCA C2AC56C6 E5BB658E 444F4DCE 6FED094A D4AF4E10
9C688B2E 957B899B 13CAE234 34C1F35B F3497B62 83488174 D188786C 0253F9BC
7F432657 5833833B 330A17B0 D04E9124 AD867D64 12DC744A 34A11D0A EA961D0B
15FCA34B 3BCE6388 D0F82D0C 948610CA B69A3DCA EB379C00 48358629 5078E845
63CD1941 4FF595EC 7B98D4C4 71B350BE 28B38FA0 B9539CF5 CA2C23A9 FD1406E8
18B49AE8 3C6E81FD E4CD3536 B351D369 EC12BA56 6E6F9B57 C58B14E7 0EC79CED
4A546AC9 4DC5BF11 B1AE1C67 81CB4455 33997F24 9B3F5345 7F861AF3 3CFA6D7F
81F5B84A D3F58537 1CB5A6D0 09E4187B 384EFA0F 02030100 01A38201 DF308201
DB303406 082B0601 05050701 01042830 26302406 082B0601 05050730 01861868
7474703A 2F2F6F63 73702E76 65726973 69676E2E 636F6D30 12060355 1D130101
FF040830 060101FF 02010030 70060355 1D200469 30673065 060B6086 480186F8
45010717 03305630 2806082B 06010505 07020116 1C687474 70733A2F 2F777777
2E766572 69736967 6E2E636F 6D2F6370 73302A06 082B0601 05050702 02301E1A
1C687474 70733A2F 2F777777 2E766572 69736967 6E2E636F 6D2F7270 61303406
03551D1F 042D302B 3029A027 A0258623 68747470 3A2F2F63 726C2E76 65726973
69676E2E 636F6D2F 70636133 2D67352E 63726C30 0E060355 1D0F0101 FF040403
02010630 6D06082B 06010505 07010C04 61305FA1 5DA05B30 59305730 55160969
6D616765 2F676966 3021301F 30070605 2B0E0302 1A04148F E5D31A86 AC8D8E6B
C3CF806A D448182C 7B192E30 25162368 7474703A 2F2F6C6F 676F2E76 65726973
69676E2E 636F6D2F 76736C6F 676F2E67 69663028 0603551D 11042130 1FA41D30
1B311930 17060355 04031310 56657269 5369676E 4D504B49 2D322D36 301D0603
551D0E04 1604140D 445C1653 44C1827E 1D20AB25 F40163D8 BE79A530 1F060355
1D230418 30168014 7FD365A7 C2DDECBB F03009F3 4339FA02 AF333133 300D0609
2A864886 F70D0101 05050003 82010100 0C8324EF DDC30CD9 589CFE36 B6EB8A80
4BD1A3F7 9DF3CC53 EF829EA3 A1E697C1 589D756C E01D1B4C FAD1C12D 05C0EA6E
B2227055 D9203340 3307C265 83FA8F43 379BEA0E 9A6C70EE F69C803B D937F47A
6DECD018 7D494ACA 99C71928 A2BED877 24F78526 866D8705 404167D1 273AEDDC
481D22CD 0B0B8BBC F4B17BFD B499A8E9 762AE11A 2D876E74 D388DD1E 22C6DF16
B62B8214 0A945CF2 50ECAFCE FF62370D AD65D306 4153ED02 14C8B558 28A1ACE0
5BECB37F 954AFB03 C8AD26DB E6667812 4AD99F42 FBE198E6 42839B8F 8F6724E8
6119B5DD CDB50B26 058EC36E C4C875B8 46CFE218 065EA9AE A8819A47 16DE0C28
6C2527B9 DEB78458 C61F381E A4C4CB66
quit
crypto key pubkey-chain rsa
named-key realm-cisco.pub signature
key-string
30820122 300D0609 2A864886 F70D0101 01050003 82010F00 3082010A 02820101
00C19E93 A8AF124A D6CC7A24 5097A975 206BE3A2 06FBA13F 6F12CB5B 4E441F16
17E630D5 C02AC252 912BE27F 37FDD9C8 11FC7AF7 DCDD81D9 43CDABC3 6007D128
B199ABCB D34ED0F9 085FADC1 359C189E F30AF10A C0EFB624 7E0764BF 3E53053E
5B2146A9 D7A5EDE3 0298AF03 DED7A5B8 9479039D 20F30663 9AC64B93 C0112A35
FE3F0C87 89BCB7BB 994AE74C FA9E481D F65875D6 85EAF974 6D9CC8E3 F0B08B85
50437722 FFBE85B9 5E4189FF CC189CB9 69C46F9C A84DFBA5 7A0AF99E AD768C36
006CF498 079F88F8 A3B3FB1F 9FB7B3CB 5539E1D1 9693CCBB 551F78D2 892356AE
2F56D826 8918EF3C 80CA4F4D 87BFCA3B BFF668E9 689782A5 CF31CB6E B4B094D3
F3020301 0001
quit
ip ips auto-update
occur-at weekly 0-6 10 0-23
cisco
username ccouserid password ccouserpw
!
interface GigabitEthernet0/0
ip address 192.168.200.1 255.255.255.0
ip ips IPS in
duplex auto
speed auto
扫一扫
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
