External Certificates for IPSEC VPN

baby79 — Sun, 31 Aug 2025 11:10:11 GMT

Hi,

I am trying to check the external certificates on the management server for Site to Site VPN and Remote Access will the commands below show these.

I dont have access to the SmartConsole only on the CLI of management server.

We are using R81.10 take 172

mgmt_cli show vpn-trusted-certs -s id.txt

mgmt_cli show trusted-cas -s id.txt

Thanks.

Re: External Certificates for IPSEC VPN

the_rock — Sun, 31 Aug 2025 23:12:11 GMT

Yes. In summary:

Site-to-Site VPN: Use show vpn-trusted-certs.
Remote Access VPN: Check show trusted-cas. The actual RA VPN certificate will be signed by one of these CAs.

Andy