Section 3.0: Cisco VPN (16 Points)

Question 3.1: Configuring Cisco IOS CA Server (3 points)

Configure a Cisco IOS Certificate Authority (CA) server on R1, meeting all the following requirements:

• Configure R1 as the Cisco IOS CA server using the information provided in the following show command output:

  R1# show crypto pki server myCA
  Certificate Server myCA:
      Status: enabled
      State: enabled
      Server's configuration is locked (enter "shut" to unlock it)
      Issuer name: CN=myCA.cisco.com
      CA cert fingerprint: DCB2B525 0E99785C 0770EE49 722BDB63
      Granting mode is: auto
      Last certificate issued serial number (hex): 1
      CA certificate expiration timer: 08:56:42 UTC Jun 8 2010
      CRL NextUpdate timer: 14:56:43 UTC Jun 8 2009
      Current primary storage dir: flash:
      Database Level: Complete - all issued certs written as <serialnum>.cer

• Configure the lifetime of the certificate server and the certificate issued by the server to one year.

• After the CA server is up, configure ASA2 and R5 as the CA clients, and obtain the certificates on both devices.