Alcatel-Lucent 7450 - Page 193

Security
7450 ESS System Mangement Guide Page 193
Description This command specifies the calendar date and time after which the key specified by the keychain
authentication key is used to sign and/or authenticate the protocol stream.
If no date and time is set, the begin-time is represented by a date and time string with all NULLs and
the key is not valid by default.
Parameters date hours-minutes — Specifies the date and time for the key to become active.
Values date: YYYY/MM/DD
hours-minutes: hh:mm[:ss]
now — Specifies the the key should become active immediately.
forever — Specifies that the key should always be active.
end-time
Syntax end-time [date] [hours-minutes] [UTC] [now] [forever]
Context config>system>security>keychain>direction>uni>receive>entry
config>system>security>keychain>direction>uni>send>entry
Description This command specifies the calendar date and time after which the key specified by the authentica-
tion key is no longer eligible to sign and/or authenticate the protocol stream.
Default forever
Parameters date — Specifies the calendar date after which the key specified by the authentication key is no lon-
ger eligible to sign and/or authenticate the protocol stream in the YYYY/MM/DD format. When
no year is specified the system assumes the current year.
hours-minutes — Specifies the time after which the key specified by the authentication key is no lon-
ger eligible to sign and/or authenticate the protocol stream in the hh:mm[:ss] format. Seconds are
optional, and if not included, assumed to be 0.
UTC — Indicates that time is given with reference to Coordinated Universal Time in the input.
now — Specifies a time equal to the current system time.
forever — Specifies a time beyond the current epoch.
tolerance
Syntax tolerance [seconds | forever]
Context config>system>security>keychain>direction>bi>entry
config>system>security>keychain>direction>uni>receive>entry
config>system>security>keychain>direction>uni>send>entry
Description This command configures the amount of time that an eligible receive key should overlap with the
active send key or to never expire.
Parameters seconds — Specifies the duration that an eligible receive key overlaps with the active send key.