Security
7450 ESS System Mangement Guide Page 117
The second algorithm is a more complex key, and cannot be copied and pasted in different locations
in the configuration file. In this case, if the same key or password is used repeatedly in different con-
texts, each encrypted (hashed) version will be different.
Default all — read-version set to accept both versions 1 and 2
Parameters read-version {1 | 2 | all} — When the read-version is configured as “all,” both versions 1 and 2 will
be accepted by the system. Otherwise, only the selected version will be accepted when reading con-
figuration or exec files. The presence of incorrect hash versions will abort the script/startup.
write-version {1 | 2} — Select the hash version that will be used the next time the configuration file
is saved (or an info command is executed). Be careful to save the read and write version correctly, so
that the file can be properly processed after the next reboot or exec.
per-peer-queuing
Syntax [no] per-peer-queuing
Context config>system>security
Description This command enables CPM hardware queuing per peer. This means that when a peering session is
established, the router will automatically allocate a separate CPM hardware queue for that peer.
The no form of the command disables CPM hardware queuing per peer.
Default per-peer-queuing
source-address
Syntax source-address
Context config>system>security
Description This command specifies the source address that should be used in all unsolicited packets sent by the
application.
This feature only applies on inband interfaces and does not apply on the outband management inter-
face. Packets going out the management interface will keep using that as source IP address. IN other
words, when the RADIUS server is reachable through both the management interface and a network
interface, the management interface is used despite whatever is configured under the source-address
statement.
When a source address is specified for the ptp application, the port-based 1588 hardware timestamp-
ing assist function will be applied to PTP packets matching the IPv4 address of the router interface
used to ingress the SR/ESS or IP address specified in this command. If the IP address is removed,
then the port-based 1588 hardware timestamping assist function will only be applied to PTP packets
matching the IPv4 address of the router interface.
application
To Next Page
Loading...
