cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Who rated this post

Cyber Elite
Cyber Elite

 

For PKI certificates that have a CRL/OCSP host located on the internet, in case your management interface is oob and cannot access the internet, you may want to create a service route ( Device > Setup > Services > Service Route Configuration) so outbound connections to these hosts are performed using a dataplane interface instead of the management interface

 

 

Tom Piens
PANgurus - Strata specialist; config reviews, policy optimization
Who rated this post