< Home

certification cert-anonymous cert-field

Function

The certification cert-anonymous cert-field command sets the certificate fields extracted as the user name and group name during the certificate anonymous authentication.

Format

certification cert-anonymous cert-field user-filter { issuer { c | cn | email | l | o | ou | st }| notafter | notbefore | serialnum | subject { c | cn | email | l | o | ou | st } | version } [ group-filter { issuer { c | cn | email | l | o | ou | st } | notafter | notbefore | serialnum | subject { c | cn | email | l | o | ou | st } | version } ]

Parameters

Parameter Description Value
user-filter Indicates the user name filtering field. -
group-filter Indicates the group name filtering field. -
issuer | notafter | notbefore | serialnum | subject | version Indicates the master field. The default value is subject.
c | cn | email | l | o | ou | st Indicates the sub field. The default value is cn.

Views

Security view

Default Level

2: Configuration level

Usage Guidelines

None

Example

# Set the certificate fields extracted as the user name and group name during the certificate anonymous authentication. The certificate master field and sub field of the user name are issuer and c respectively. The certificate master field and sub field of the group name are notafter.

<sysname> system-view
[sysname] v-gateway gateway
[sysname-gateway] security
[sysname-gateway-security] certification cert-anonymous cert-field user-filter issuer c group-filter notafter
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >