Specifying the source IP address for PKI protocol packets

About specifying the source IP address for PKI protocol packets

This task is required if the CA policy requires that the CA server accept certificate requests from a specific IP address or subnet.

Procedure

  1. Enter system view.

    system-view

  2. Enter PKI domain view.

    pki domain domain-name

  3. Specify a source IP address for the PKI protocol packets.

    IPv4:

    source ip { ip-address | interface interface-type interface-number }

    IPv6:

    source ipv6 { ipv6-address | interface interface-type interface-number }

    By default, the source IP address of PKI protocol packets is the IP address of their outgoing interface.