思科交换机crypto pki trustpoint TP-self-signed-18999761

Posted 2020-10-21

最近碰到一个思科交换机WS-C2960-24TC-L硬件坏了，更换了同型号的思科交换机。再进行配置转移时候，发现了下面这一串代码。

!
crypto pki trustpoint TP-self-signed-3356232880
enrollment selfsigned
subject-name cn=ios-Self-Signed-Certificate-3356232880
revocation-check none
rsakeypair TP-self-signed-3356232880
!
!
crypto pki certificate chain TP-self-signed-3356232880
certificate self-signed 01
30820248 308201B1 A0030201 02020101 300D0609 2A864886 F70D0101 04050030
31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
69666963 6174652D 33333532 33363238 3830301E 170D3933 30333031 30303031
35395A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D33 33353233
36323838 3030819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
8100C86B F84D1DE5 1C958E0E D0D2EC78 F1EE4446 18F463B8 CFC4230D 53A2CBE0
5EA961C1 2375245A DEB4E7FA D1701C6E 4462E98C F56CD990 E75DA3A0 E29FFDA6
BEE25FA5 7B8435DF 7AAB29D8 A98ECBAE 3EEDCF92 534C6793 34830B26 CADFB17B
70E3862F 8D46E9BE E336CBDD 55D9B812 C4D013AF C8F4D99C 3D6D8B6B 5A4BDEBC
CDBD0203 010001A3 70306E30 0F060355 1D130101 FF040530 030101FF 301B0603
551D1104 14301282 10444759 2D43572D 43323936 302D3246 2E301F06 03551D23
04183016 80144629 58ABC501 268366C1 CD84515C 75BDF45E 81E7301D 0603551D
0E041604 14462958 ABC50126 8366C1CD 84515C75 BDF45E81 E7300D06 092A8648
86F70D01 01040500 03818100 18AC56F3 C3208598 5E2C2921 0960BABE 0408A2B1
1E387A2D 81BC9832 4681CD74 B9AE514A 2026A806 9B62AFFC 1A59CB4A 6CCA2EB5
96A2CD1D 7C109ACA B131B264 001EFC3C 1205247C E413F876 258EEB48 A4F0C55D
504C7FD3 0917C56A 2E7FC96A AE6A1243 F80F614F D1A7841F F2AA13AD E7229089
388F3422 02AEAC45 680FF5FC
quit
!
!
!
spanning-tree mode pvst
spanning-tree extend system-id
!

因为这个在该公司是接入交换机，配置不是很多，我是手工配置，没打算用导出原有配置文件来进入导入操作。
其他配置还好说，关于这一串，当时不知道是干嘛用的。不知道是不是得手工配置，尤其好奇30820248 308201B1这样的8位一组难道都是手写的吗。
问了几个思科施工过的网络工程师，他们说不需要配置，是自动生成的。
我通过实施，果真验证了那面crypto pki trustpoint TP-self-signed-1899933192到 0423C236 5CCBE10A 5DD9BD6A C4899A全部是思科设备自动生成的，无需自己配置。

[12:56:42]!
[12:56:42]crypto pki trustpoint TP-self-signed-1899933192
[12:56:42] enrollment selfsigned
[12:56:43] subject-name cn=IOS-Self-Signed-Certificate-1899933192
[12:56:43] revocation-check none
[12:56:43] rsakeypair TP-self-signed-1899933192
[12:56:43]!
[12:56:43]!
[12:56:43]crypto pki certificate chain TP-self-signed-1899933192
[12:56:43] certificate self-signed 01
[12:56:43] 3082022B 30820194 A0030201 02020101 300D0609 2A864886 F70D0101 05050030
[12:56:43] 31312F30 2D060355 04031326 494F532D 53656C66 2D536967 6E65642D 43657274
[12:56:43] 69666963 6174652D 31383939 39373631 3932301E 170D3933 30333031 30303036
[12:56:43] 35375A17 0D323030 31303130 30303030 305A3031 312F302D 06035504 03132649
[12:56:43] 4F532D53 656C662D 5369676E 65642D43 65727469 66696361 74652D31 38393939
[12:56:43] 37363139 3230819F 300D0609 2A864886 F70D0101 01050003 818D0030 81890281
[12:56:43] 81009920 160E373B 146D7C17 06A3682D D3B96A2E B3755B91 D30A80F9 5BABB1CE
[12:56:43] 02334149 81B8B1F8 A034F73A B3FB318E 15746CFD 55A8D3AE 38675DFE D1DB231F
[12:56:49] B4EC0D83 ACF3B575 B1684716 0C0A4A09 D1DABA33 52A53AA9 CC74C8E3 60E180B0
[12:56:49] 62AE82EA 8060BBB6 33BF9686 49F7C795 3B156507 DBB251BD 601B10D0 53057A5F
[12:56:49] 6E730203 010001A3 53305130 0F060355 1D130101 FF040530 030101FF 301F0603
[12:56:50] 551D2304 18301680 14B2757D 29B2F011 30B2BF5E EF5458C2 0A8082F1 6B301D06
[12:56:50] 03551D0E 04160414 B2757D29 B2F01130 B2BF5EEF 5458C20A 8082F16B 300D0609
[12:56:50] 2A864886 F70D0101 05050003 81810090 4B734E80 D3595F71 1A2014BD A1B70C62
[12:56:50] E4D27D65 A58B3A81 162380CF A5426ED1 6E739F72 A123062D 869AEFEA 99F60069
[12:56:50] 05B71AB5 CF656B47 38AB1F4C A55B952E F386C231 73C72FE9 9A853F41 52C4B892
[12:56:50] 52924405 DB229C57 E9C06367 D31D0100 538F2C7F 66E51923 E5792733 AC6A6B9A
[12:56:50] 0423C236 5CCBE10A 5DD9BD6A C4899A
[12:56:50] quit
[12:56:50]spanning-tree mode pvst
[12:56:50]spanning-tree extend system-id
[12:56:50]!