Configuring TLS on the SAE (SRC CLI)

Use the following configuration statements to configure TLS on the SAE:

To configure TLS on the SAE:

1. From configuration mode, access the configuration statement that configures security for the Junos TLS connection. In this sample procedure, the Junos driver is configured in the west-region group.
   user@host# edit shared sae group west-region configuration driver junos security
2. (Optional) Specify whether or not the SAE requests a client certificate from the router when a connection to the router is established.
   [edit shared sae group west-region configuration driver junos security] user@host# set need-client-authentication
3. Specify the name of certificate to be used for TLS communications.
   [edit shared sae group west-region configuration driver junos security] user@host# set certificate-identifier private-key
4. (Optional) Verify your TLS configuration.

   [edit shared sae group west-region configuration driver junos security]
   user@host# show 
   need-client-authentication;
   certificate-identifier privatekey;

Related Documentation

• Configuring TLS on the SAE
• Configuring the SAE to Use TLS (SRC CLI)
• Configuring the SAE to Manage Devices Running Junos OS (SRC CLI)
• Monitoring Interactions Between the SAE and Devices Running Junos OS
• BEEP Connection Between Devices Running Junos OS and the SAE