local-eap-server authentication certificate ca
Format
local-eap-server authentication certificate ca format pem filename filename
undo local-eap-server authentication certificate ca
Usage Guidelines
Usage Scenario
In WAN 802.1X authentication escape scenarios, after CAPWAP tunnels between the AC and APs are disconnected, you can initiate 802.1X authentication on the built-in local RADIUS servers of the APs to implement WAN escape. The built-in RADIUS servers of APs support the following EAP authentication protocols: EAP-TLS, EAP-PEAP, and EAP-TTLS. If EAP-TLS is selected, configure a CA certificate, local certificate of the local RADIUS server, and private key of the local RADIUS server.You can run this command to configure a CA certificate. After APs go online, the AC automatically delivers the CA certificate to the APs.
Precautions
- When a certificate is added to or deleted from an online AP, run the load-authentication-file command to manually deliver the certificate to the AP.
- If a certificate is being delivered, this command cannot be executed.
