H3C Technologies H3C SecPath F1000-E - Manual (Page 804)

30
# Retrieve the CRL.
• After retrieving a local certificate, select VPN > PKI > CRL from the navigation tree.
Figure 35 Retrieve the CRL
• Click Retrieve CRL of the PKI domain of 1.
# Configure IKE proposal 1, using RSA signature for identity authentication.
• Select VPN > IKE > Proposal from the navigation tree and then click Add to perform the
configurations shown in Figure 36 .
Figure 36 Add an IKE proposal
• Type 1 as the IKE proposal number.
• Select RSA Signature as the authentication method.
• Click Apply.
# Configure an IKE peer and reference the configuration of the PKI domain for the IKE peer.
• Select VPN > IKE > Peer from the navigation tree and then click Add to perform the
configurations shown in Figure 37 .