|
The RSR10 router is used to perform digital certificate-based IPsec authentication, but negotiation fail safter the router is restarted. |
|
Because the RSR10 router does not have an embedded clock chip, the router will restore the default time setting after restart. If digital certificate-based IPsec authentication is performed at the same time, the validity of the certificate will fail to be verified. To solve the problem, use any of the following methods: 1. Configure a Network Time Protocol (NTP) server on the RSR10 router so that the system time of the router can be synchronized correctly after the router is restarted. 2. Configure time-check none under the trustpoint of the certificate to disable certificate time check. crypto pki trustpoint ruijie time-check none |
This site contains user submitted content, comments and opinions and is for informational purposes only. Ruijie may provide or recommend responses as a possible solution based on the information provided; every potential issue may involve several factors not detailed in the conversations captured in an electronic forum and Ruijie can therefore provide no guarantee as to the efficacy of any proposed solutions on the community forums. Ruijie disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Ruijie Community Terms of Use.
More ways to get help: Visit Support Videos, call us via Service Hotline, Facebook or Live Chat.
©2000-2023 Ruijie Networks Co,Ltd
Level 4
