OSCP

OCSP, or Online Certificate Status Protocol, is a protocol to validate whether certificates have been revoked.

System AAA OSCP Attributes

Attribute	Values	Default	Req	Description
Ocsp-server-address	IP address	N/A	Y	The IP address of the server to use for validating certificates.
Ocsp-polling-freq	Int32	300	Y	The frequency for polling the OCSP server in seconds.
Use-ocsp-server-address	true \| false	true	Y	Whether to use the server address given in this configuration. If set to false, it will look for an address within the certificate.
Enable-ocsp	true \| false	false	Y	Whether to enable the OCSP server checks of certificates.

Note 1: * = required parameter

Command Path – tolt>system >aaa>oscp>
Module – tolt
Container – system
Container – aaa
Container – oscp
Action – config
Types – Input Parameters
- *Ocsp-server-address – The IP address of the server to use for validating certificates.
- *Ocsp-polling-freq – The IP address of the server to use for validating certificates.
  - Int32 (Default 300)
- *Use ocsp-server-address – Whether to use the server address given in this configuration. If set to false, it will look for an address within the certificate.
  - True | false (Default true (enabled))
- *Enable-ocsp – Whether to enable the OCSP server checks of certificates.
  - True | false (Default false).

AAA Config OSCP Example

Command Path – tolt>system>aaa>oscp>
Module – tolt
Container – system
Container – oscp
Action – config

Types – Example Parameters
- enable-ocsp – enabled
- ocsp-server-address – 192.168.1.100
- ocsp-polling-freq – 300
- use ocsp-server-address – true

From the MDS1-ESUA<Config># command line, input tolt system aaa oscp enable-ocsp enabled ocsp-polling-freq 300 ocsp-server-address 192.168.1.100 use ocsp-server-address true, and press Enter.
From the MDS1-ESUA<Config># command line, input commit, and press Enter.
Outputs similar to the following are displayed:

MDS1-ESUA<Config># tolt system aaa oscp enable-ocsp enabled  
ocsp-polling-freq 300 ocsp-server-address  192.168.1.100 use ocsp-server-address true <enter>
MDS1-ESUA<Config># commit <enter>
Commit complete.
MDS1-ESUA<Config># _