No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Fat AP and Cloud AP V200R010C00 Command Reference

Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
wapi import certificate

wapi import certificate

Function

The wapi import certificate command imports the central AP certificate file, certificate of the central AP certificate issuer, and ASU certificate file.

The undo wapi certificate command deletes the imported central AP certificate file, certificate of the central AP certificate issuer, or ASU certificate file.

By default, the central AP certificate file, certificate of the central AP certificate issuer, and ASU certificate file are not imported.

Format

wapi import certificate { ap | asu | issuer } format pkcs12 file-name file-name password password

wapi import certificate { ap | asu | issuer } format pem file-name file-name

undo wapi certificate { ap | asu | issuer }

Parameters

Parameter

Description

Value

ap

Specifies the central AP certificate.

-

asu

Specifies the ASU certificate.

-

issuer

Specifies the certificate of the central AP certificate issuer.

-

format pkcs12

Imports a certificate in P12 format.

-

format pem

Imports a certificate in PEM format.

-

file-name file-name

Specifies a certificate file name, which the complete path of a certificate file must be specified.

The value is a string of 1 to 255 characters. It cannot contain question marks (?) and cannot start or end with double quotation marks (" ") or spaces.

password password

Specifies the key of the P12 certificate.

The password can be in plain text or cipher text.
  • A plain text password is a string of 1 to 32 characters.
  • A cipher text password is a string of 48 or 68 characters.

Views

Security profile view

Default Level

3: Management level

Usage Guidelines

  • If WAPI certificate authentication is specified as a security policy in a security profile, run the wapi import certificate command to specify the central AP certificate, certificate of the central AP certificate issuer, and ASU certificate. STAs will fail to be authenticated if you do not run this command. The issuer certificate helps to check whether the central AP certificate is modified.
  • Before using this command, store the central AP certificate and ASU certificate to the storage of the device, and import the certificates and private key using TFTP. Certificates must be X509 V3 certificates and comply with the WAPI standard. Otherwise, certificates cannot be imported.
  • After this command is run:
    • When an issuer certificate is configured, the system checks correctness of the central AP certificate.
    • If the authentication system uses only two certificates, the issuer certificate and ASU certificate have the same certificate file name and are the same certificate. If the authentication system uses three certificates, the issuer certificate and ASU certificate are different from each other and both must be imported.
  • The ASU certificate and issuer certificate must be imported.
  • Certificates to be imported must be valid and correct.
  • If the certificate with the same name but different contents has been imported by other security profiles, delete the earlier certificate first.

Example

# Import the central AP certificate.
<Huawei> system-view
[Huawei] wlan
[Huawei-wlan-view] security-profile name p1
[Huawei-wlan-sec-prof-p1] wapi import certificate ap format pem file-name flash:/local_ac.cer
Translation
Download
Updated: 2019-11-21

Document ID: EDOC1100064352

Views: 212647

Downloads: 122

Average rating:
This Document Applies to these Products
Related Version
Related Documents
Share
Previous Next