config firewall access-proxy-ssh-client-cert
Configure Access Proxy SSH client certificate.
config firewall access-proxy-ssh-client-cert
Description: Configure Access Proxy SSH client certificate.
edit <name>
set auth-ca {string}
config cert-extension
Description: Configure certificate extension for user certificate.
edit <name>
set critical [no|yes]
set data {string}
set type [fixed|user]
next
end
set permit-agent-forwarding [enable|disable]
set permit-port-forwarding [enable|disable]
set permit-pty [enable|disable]
set permit-user-rc [enable|disable]
set permit-x11-forwarding [enable|disable]
set source-address [enable|disable]
next
end
config firewall access-proxy-ssh-client-cert
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
auth-ca |
Name of the SSH server public key authentication CA. |
string |
Maximum length: 79 |
|
||||||
|
name |
SSH client certificate name. |
string |
Maximum length: 79 |
|
||||||
|
permit-agent-forwarding |
Enable/disable appending permit-agent-forwarding certificate extension. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
permit-port-forwarding |
Enable/disable appending permit-port-forwarding certificate extension. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
permit-pty |
Enable/disable appending permit-pty certificate extension. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
permit-user-rc |
Enable/disable appending permit-user-rc certificate extension. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
permit-x11-forwarding |
Enable/disable appending permit-x11-forwarding certificate extension. |
option |
- |
enable |
||||||
|
|
|
|||||||||
|
source-address |
Enable/disable appending source-address certificate critical option. This option ensure certificate only accepted from FortiGate source address. |
option |
- |
disable |
||||||
|
|
|
|||||||||
config cert-extension
|
Parameter |
Description |
Type |
Size |
Default |
||||||
|---|---|---|---|---|---|---|---|---|---|---|
|
critical |
Critical option. |
option |
- |
no |
||||||
|
|
|
|||||||||
|
data |
Data of certificate extension. |
string |
Maximum length: 127 |
|
||||||
|
name |
Name of certificate extension. |
string |
Maximum length: 127 |
|
||||||
|
type |
Type of certificate extension. |
option |
- |
fixed |
||||||
|
|
|
|||||||||