Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


crl (Encryption Interface)


Hierarchy Level


(Encryption interface on M Series and T Series routers and EX Series switches only) Configure the certificate revocation list (CRL). A CRL is a time-stamped list identifying revoked certificates, which is signed by a CA and made available to the participating IPsec peers on a regular periodic basis.


file-name—Specify the file from which to read the CRL.

Required Privilege Level

admin—To view this statement in the configuration.

admin-control—To add this statement to the configuration

Release Information

Statement introduced before Junos OS Release 7.4.