Is there a way to force the router to re-enroll with to take down the tunnel?

Hi all

I have the following configuration:

Crypto pki trustpoint mycompany.com
number of registration attempts 5
retry registration period 3

Enrollment url http://x.x.x.x:80
Serial number no
domain name full routername.mycompany.com
IP address no
password
name of the object l = Denver, c = US
revocation checking no
automatic registration of the 70s

Scenario of

If the certificate has already reached 70 percent of his time of life and the router has already tried 5 times to get a new failure.

1. is there a way to know how many times the router tried to re-enroll?

2. is there a way to force the router to re-register without down tunnels?

3. If the router has already tried, I can increase auto-enrollment to 90 - would this work?

Thank you very much in advance for your answers.

See you soon!

mguzman4158:

Question 1

The following command output may indicate failures of re-registration after that as they occur.

HQ-edg01 #sh crypto pki timers

PKI timers
|  1:59:35.732 2D
|  2D 1:59:35.732 CRL cannot display the COP
| 353d 8:31:22.880 SURVIVOR CA.domain.null

Question 2

This chapter: setting up registration of certificate for a public key infrastructure

http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_cert_enroll_pki.PDF

... and this chapter: set up and manage a server of Cisco IOS for the deployment of public key infrastructure certificates

http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/sec_cfg_mng_cert_serv.PDF

... from this Book: Guide of the Cisco IOS Security Configuration: connectivity secure, release 12.4 T

http://www.Cisco.com/en/us/docs/iOS/sec_secure_connectivity/configuration/guide/12_4t/sec_secure_connectivity_12_4t_book.PDF

.. could help.

Question 3

In my opinion, I think that you would be able to revive the reinstatement at a later date by incrementing the percentage argument.

Best regards
Mike

Tags: Cisco Security

Similar Questions

  • Is there a way to force the list of databases Access, rather than having the giant icons in my taskbar?

    When I have a few databases open, my taskbar has an icon for each file that is opened in a sloppy "battery."  Naturally, when I hover over the battery, miniature windows display each file.  After that I have a good number of them open (for example, around 10, 11 or 12), stacked icons convert a vertical list.  Is there a way to force this vertical list, even with also open some two or more db?

    If you have Windows 7 Pro or Ultimate, you can use Group Policy.  Otherwise, you will need to perform a small registry change.

    For Pro or Ultimate, see method 1 here--> http://helpdeskgeek.com/windows-7/disable-taskbar-thumbnail-previews-windows-7/

    For any version of Windows 7 (also allows you to set the number of preview windows that appear before moving on to the list), see--> http://www.sevenforums.com/tutorials/75804-taskbar-list-thumbnail-previews-mode-change.html

  • Is there a way to force the href = "mailto: to use the default email client"

    I would use the href = "" mailto: "in my site Web automatically opens an email but the end user receives the message"there is no associated messaging program to perform the action requested... " »

    Is there a way to force to the mailto to use the, and the user's default e-mail client?

    Thank you for your help

    Hi James -.

    This is the default behavior of browsers when you handle the mailto link.

    Please keep in mind almost half of Web site visitors do not have an email client because they use mobile devices or computers in public or web-based email like Gmail, messaging, MSN etc.

    Please do not feed the spammers robots. Recommended is to use a HTML element 'form' in conjunction with a script of processing forms aside server. Ask your webhost if they provide one for you.

  • Is there a way to force the transfer of files in a certain order?

    Hello
    XP sp3 running on computer dell laptop 6400.

    I'm trying to transfer an audiobook on an sd card and the need to keep the files in order. Periodically, one or two files are sent out of sequence. Since my Player reads the files in the order they were sent, this is unacceptable. Is there anything that I can force the orders files are sent?

    Thank you

    * original title - scrambled records *.

    The device creates a "playlist" because the files are copied, and so that they are copied.

    If the files are all in alphabetical or numerical order copy the files from the CD to the hard drive, then copy them to the hard drive of the machine with the copy command and a list of files at the command prompt.

    For example, to copy all audio files to a folder named book on the C: drive, and then from the command prompt try:

    for /f "tokens = *" %a in ('dir /b c:\book") copy 'c:\book\%a' x:\

    (where x: is the letter from SD card)

    John

  • Is there a way to force the tab order to jump a page and then return to this page in a form?

    I have a several page with a required page layout form.  The problem with the current layout of the form, is that I find my users get to '20' page, and it seems like the natural shape... end and stop the seizure of data and submit.  The problem is, there is a field for additional form on the next page that may have need of important information.

    The information contained in this final field is present only in about 10% of the observations, but are crucial to the file, if necessary.  As I said, the page layout is necessary.

    Is it possible to change the tab order from the last form field on the page "19" to the form field on the page "21", and then again the fields in the form on the page "20"?

    It's pretty simple to implement. Until the event OnBlur in the field, you can enter this code:

    this.getField("OtherFieldName").setFocus ();

    Of course, this will cause the other field to be tabulated in even if the user doesn't click tab to leave the field, a few clicks out of it...

  • Is there a way to force the tablets to read the version of the Tablet?

    The only difference between the versions of the Tablet and desktop, this is the version of the Tablet has been designed to exclude all the scrolling parallax. After the first edition and the test tablets read the version of the tablet. After a few days, only the desktop version arrives. Suggestions?

    So this morning I tried this:

    File, publish to Business Catalyst, then under the Upload (only files / all files modified) options is to redirect the choice between 'Redirect universal' or 'redirect Business Catalyst.

    "Universal Redirect" was selected. I changed it to 'Business Catalyst redirect' and that seemed to fix the problem.

    Thank you both for your quick responses. You're in the right area to find the solution.

  • Any way to force the execution of the workflow on existing data?

    I wrote a workflow rule to update the field back to match the sum of a few custom customer field. When the record is updated or a new record is created income is updated with the desired value. However, I have a few thousands opportunities that already exist. Is there a way to force the workflow to run on any existing data? If not, is the only option for export and re - import all data used?

    Using the mass update is another choice, but to 50 cases per race that is rather painful. The route of export/import is much less clicks. Just empty the opportunity name and filed a trivial you don't use. Change the trivial field in Excel. Recharge with update.

    The f

  • Is it done to unplug iMac to unlock that damage the computer? Is there a way to force close when it is completely insensitive?

    I tried closing a screen and got a spinning wheel. The system was totally insensitive. I tried to close it with the power button and when it restarted, he returned to the State. So, as a last resort, I disconnected from the back. After I waited 30 seconds, I plugged it it back, pushed the power button, and it worked fine, once again. Told me you should not unplug the computer because you could do a surge when you plug it in. Is there a way to force quit the application causing the gel when the computer has been insensitive to everything? How about by pressing Command-Option-ESC for 3 seconds? That would have worked?

    Command + Option + ESC only leaves open applications.

    The next time that the system does not respond, press and hold the power button until the screen goes black.

    Wait at least ten seconds before press power once to turn it on again.

    * Never disconnect your Mac from its power source while it is on

  • is there a way to reset the WEP key of a Netgear router, which shows not compatible with my computer as a wireless router?

    Daughter's boyfriend installed Netgear router wireless, but everyone has forgotten the WEP password, and I had to reset it and now can not get the wireless to the top.  Is there a way to reset the security password, and it shows the router, but cause 'inconsistent', says there is no security password to connect to it.  HELP, please!

    Thank you

    Kelli

    Maybe some help here: reset and restore the NETGEAR device to factory default settings

  • Is there a way to force to render all clips in the work area?

    Is there a way to force to render all clips in the work area? All clips: not only those with horizontal red line indicating that they need rendering! I ask this because videos made preview very well unrolled, but UN-rendered ones are not! My source of the layer film (project and) imply Full HD (1920 * 1080i 25 fps).

    If a Clip has not made, it will not be rendered.

    Basically, what the rendering is to convert the Clips, that don't require not rendered, DV - AVI (DD on a PC projects). This will produce AVI in the media Cache files, make files, and for reading, pre will rely on those. If you look in the folder of files of rendering, you'll see a bunch of files named in the abstract, but these files are now linked in the PREL (project file) and will be used by the program for reading.

    If one were to remove those go files and open this project in the first instance, they would receive a message, 'where's the file 04u434ip0ow. AVI? "[Note: that is just one example of the rendered file name abstract and is not the real name, you'd see.]. Could not ignore those missing now render files, and where they were used, it would be red lines on the clamps.

    As Steve mentions, rendering files are used only for smoother playback. As I use DV - AVI SD projects files on my PC, I have no need of rendering for a reading that is more gentle, until I have changes to the Clips, as superimposition of PiP, effects, titles, etc... I could never restore the timeline, even with these additions, but sometimes, I make a small segment several times, especially with animation effects, that I adjust the settings.

    If it does not receive more smooth playback, then make all the files to be rendered usually reading will greatly improve.

    Good luck and I hope it makes sense.

    Hunt

  • Is in any way to 'force' the NB of 550 to 1024 x 768 resolution

    Hello

    Is any way to 'force' the resolution on the NB of 550 to 1024 x 768, Winbdows 8 can take place on this issue? There are some hacks around other netbooks, but I couldn't find anything for the netbook from Toshiba.

    Hello

    In my opinion this is not possible because the internal LCD display supports a maximum resolution of 1024 x 600
    This isn't a matter of driver graphics card or software but it s a hardware limitation of the display internal.

  • My audio book purchases aren't syncing my iPhone to my iPad. Is there a way to force sync my purchases on all my devices?

    I bought a few different books on my iPhone and I wanted to listen to them from my iPad Pro (because these speakers are amazing) but when I went to the iBooks app, my purchases of books were there. But not my audio books. Is there a way to force synchronization? They do not appear in the section "purchase" of the store on the iPad either for redownloading. It seems to only exist on my iPhone.

    No, audio books is an exception in that they cannot be redownloaded. You can transfer these purchases to iTunes on your computer and then synchronize other devices with iTunes to transfer audio books to them.

  • Is there a way to see the ip address of the devices connected via the airport?

    Hello world

    Is there a way to see the ip addresses of the devices connected via the airport? I can see the name of the devices but not what ip are they?

    Thanks in advance.

    Open AirPort Utility

    Hold down the option on your Mac so you double-click on the image of the AirPort router

    Wireless clients are displayed

    Click on the small arrow next to each wireless client to see details about the device and the connection

  • Is there a way to make the NAS200 act as a drive in my computer

    Not sure if this has been discussed here yet.

    I have a NAS200 connected to my router and I can access through my web browser without problem.

    I was wondering if there is a way to make it act as a player that is in my computer. It is to say give it a drive letter and do appear in "my computer".

    I'm under win 8 pro desktop hard wired to the router with the nas200 connected. Is there a way to "climb" the nas200 as drive on the computer.

    Thank you

    Bob

    Yes, you just need to map the drive on your computer. You must ensure that the network drive is detected in the first network. You can click on the following link to find out how to map the drive:

    How to create a shortcut to map a network drive

  • Is there a way to make the snap windows volume mixer all volume of requests to match the main volume?

    I noticed that windows likes to change my settings of volume for some applications, probably in an effort to help me, but it seems to create more problems than it prevents. For example, when I start a game, my itunes volume is lowered. The way I calculate it, this often leads to a variety of different volume levels for different applications after awhile, and if I turn up the volume with my volume key (which increases the overall volume) they only rise proportionally. So if the volume of Chrome is 50% and iTunes' volume is 10% and I increase the volume to maximum, iTunes volume only goes up to 20%, forcing me to manually open the mixer volume and level everything. I noticed the overall volume take a gray line in the whole of the mixer, is there a way to force all applications to align on this gray line and does not move unless I change myself in the mixer? Uncheck everything in the volume control options didn't fix it.

    Thank you.

    The way I did earlier was to move all the sliders up to 100% (look at your ears, however, if you have headphones on - the "bong" sound system is going to be quite noisy!).  After that I did, all volume settings have been aligned on the line grey and synchronized with the master volume.

Maybe you are looking for