pki whitelist common-name filename

Function

The pki whitelist command dynamically modifies IPsec PKI whitelist data.

pki whitelist { add | delete } common-name common-name filename file-name

Parameter	Description	Value
add	Specifies to add the IPsec PKI whitelist data to the whitelist file.	-
delete	Specifies to delete the IPsec PKI whitelist data to the whitelist file.	-
common-name common-name	Specifies the common name of a whitelist file.	The value is a string of 1 to 63 characters.
filename file-name	Specifies the name of a whitelist file.	The value is a string of 1 to 127 characters.

System view

2: Configuration level

Task Name	Operations
pki	execute

Usage Scenario

In whitelist-based IPsec certificate authentication scenarios, to dynamically modify IPsec PKI whitelist data, run the pki whitelist command.

NOTE:

After the pki whitelist command is executed, data is temporarily stored in the buffer area, and the modification does not take effect in this case.
You can run the display pki whitelist update command to check whitelist data that has been modified but for which the modification has not taken effect.
After the pki whitelist command is executed, you can run the pki whitelist update command to update the modified data.

# Add 123 to the whitelist file named 123.xml.

<HUAWEI> system-view
[~HUAWEI] pki whitelist add common-name 123 filename 123.xml