Default Settings for Keychain Management
This table lists the default settings for Cisco NX-OS keychain management parameters.
Table 36: Default Keychain Management Parameters
DefaultParameters
No keychain exists by default.Key chains
No keys are created by default when you create a new keychain.Keys
Always valid.Accept lifetime
Always valid.Send lifetime
Unencrypted.Key-string entry encryption
Configuring Keychain Management
Creating a Keychain
You can create a keychain on the device. A new keychain contains no keys.
SUMMARY STEPS
1. configure terminal
2. key chain name
3. (Optional) show key chain name
4. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Creates the keychain and enters keychain configuration
mode.
key chain name
Example:
Step 2
switch(config)# key chain bgp-keys
switch(config-keychain)#
Displays the keychain configuration.
(Optional) show key chain name
Example:
Step 3
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
421
Configuring Keychain Management
Default Settings for Keychain Management