Configures Call Home to use HTTPS as the transport method by establishing destination profiles, setting secure URLs, and defining alert group subscriptions, while ensuring proper certificate trustpoint configuration for secure data transmission.
This task enables the user to configure sending Call-home data using HTTPS as the transport method:
For the HTTPS function to work you should use the crypto ca trustpoint command to declare a CA, followed by the crl option command. This ensures that the certificates of other peers are accepted without trying to obtain the appropriate CRL. For example:
RP/0/RP0/CPU0:ios(config)#crypto ca trustpoint Trustpool RP/0/RP0/CPU0:ios(config-trustp)#crl optional
Procedure
| 1. | call-home Example:
Enters Call Home configuration mode. |
|
| 2. | profile name Example:
Enters call home destination profile configuration mode for the specified destination profile name. If the specified destination profile does not exist, it is created. |
|
| 3. | active Example:
Enables the destination profile. By default, a user-defined profile is enabled when it is created. |
|
| 4. | destination transport-method http Example:
Configures the message transport method for HTTPS. |
|
| 5. | destination address http url Example:
Configures the destination URL address to which Call Home messages are sent. |
|
| 6. | destination preferred-msg-format {long-text |short-text| xml} Example:
(Optional) Configures a preferred message format. The default is XML. |
|
| 7. | subscribe-to-alert-group syslog severity severity-level pattern string Example:
Configures a destination profile to receive messages for the syslog alert group. Alerts with a severity the same or greater than the specified severity level are sent.
You can specify a pattern to be matched in the syslog message. If the pattern contains spaces, you must enclose it in quotes (""). |