certificate-request empty-payload enable
Function
The certificate-request empty-payload enable command configures a wireless access controller to send certificate requests with empty payload.
The undo certificate-request empty-payload enable command restores the default configuration.
By default, certificate requests sent from a wireless access controller carries CA information in the payload.
Usage Guidelines
When a wireless access controller acting as a gateway in the headquarters uses an IPSec policy configured using a policy template and authenticates branches by digital certificates, you can run the certificate-request empty-payload enable command to send certificate requests with empty payload, allowing access from branches using certificates issued by different CAs. The wireless access controller can then perform certificate authentication based on certificate information provided by each branch.
PrecautionsDo not configure this command if access devices cannot process certificate request packets with an empty authentication and authorization field. Otherwise, IKE negotiation fails.
