Reference Guide

354 | local-custom-cert Dell PowerConnect W-Series ArubaOS 6.1 CLI | Reference Guide
local-custom-cert
local-custom-cert local-mac <lmac> ca-cert <ca> server-cert <cert>
suite-b <gcm-128 | gcm-256>
Description
This command configures the user-installed certificate for secure communication between a local controller and
a master controller.
Syntax
Usage Guidelines
Use this command on a master controller to configure the custom certificate for communication with a local
controller. On the local controller, use the masterip command to configure the IP address and certificates for the
master controller. If your master and local controllers use certificates for authentication, the IPsec tunnel is
created using IKEv2.
Example
The following command configures the local controller with a user-installed certificate:
(host) (config) #local-custom-cert local-mac 00:16:CF:AF:3E:E1 ca-cert cacert1 server-
cert servercert1
Related Commands
Command History
Introduced in ArubaOS 6.1
Parameter Description
<lmac> MAC address of the local controller’s user-installed certificate.
ca-cert <ca> User-defined name of a trusted CA certificate installed on the local controller. Use the show
crypto-local pki TrustedCA command to display the CA certificates that have been imported into
the controller.
server-cert <cert> User-defined name of a server certificate installed on the local controller. Use the show crypto-
local pki ServerCert command to display the server certificates that have been imported into
the controller.
suite-b If you configure your master controllers to use IKEv2 and custom-installed certificates, you can
optionally use Suite-B cryptographic algorithms for IPsec encryption. Specify one of the
following options:
 gcm-128 Use 128-bit AES-GCM Suite-B encryption
 gcm-256 Use 256-bit AES-GCM Suite-B encryption
Command Description Mode
show local-cert-mac Display the IP, MAC address and certificate configuration of
local controllers in a master-local configuration
Config mode on master
controllers.