Configuring a 2350 Switch for a Branch Office 149WLAN—Security Switch 2300 Series Installation and Basic Configuration GuideCA certificate2370# copy tftp://10.10.20.24/eap.pemsuccess: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]2370# crypto otp eap otp2OTP set2370# crypto pkcs12 eap eap.pemUnwrapped from PKCS12 file:keypairdevice certificateCA certificate2370# copy tftp://10.10.20.24/webaaa.pemsuccess: received 637 bytes in 0.253 seconds [ 2517 bytes/sec]2370# crypto otp webaaa otp3OTP set2370# crypto pkcs12 webaaa webaaa.pemUnwrapped from PKCS12 file:keypairdevice certificateCA certificate9 Set the country code to US:2370# set system countrycode USsuccess: change accepted.10 Add the 2350 to the local user VLAN, branch1_vlan. (Because the uplink port is now in two VLANs, thedefault VLAN for 2350 management and a user VLAN, the port must be tagged.) Then verify thechanges.2370# set vlan 2 name branch1_vlansuccess: change accepted.2370# set vlan branch1_vlan port 1 tag 1success: change accepted.2370# show vlanAdmin VLAN Tunl PortVLAN Name Status State Affin Port TagState---- ---------------- ------ ----- ----- ---------------- ----------1 default Up Up 5Note. After you generate or install a certificate, do not create the key pair again.If you do, the certificate might not work with the new key, in which case you willneed to regenerate or reinstall the certificate.
