External Certificates for IPSEC VPN

[baby79]

Hi,

I am trying to check the external certificates on the management server for Site to Site VPN and Remote Access will the commands below show these. 

I dont have access to the SmartConsole only on the CLI of management server.

We are using R81.10 take 172

mgmt_cli show vpn-trusted-certs -s id.txt

mgmt_cli show trusted-cas -s id.txt

Thanks.

[the_rock · Accepted solution]

Yes. In summary:

• Site-to-Site VPN: Use show vpn-trusted-certs.

• Remote Access VPN: Check show trusted-cas. The actual RA VPN certificate will be signed by one of these CAs.

Andy