Cisco Nexus 9000 Series - Page 452

2. key chain name
3. key key-ID
4. accept-lifetime [local] start-time duration duration-value | infinite | end-time]
5. send-lifetime [local] start-time duration duration-value | infinite | end-time]
6. (Optional) show key chain name [mode decrypt]
7. (Optional) copy running-config startup-config
DETAILED STEPS
PurposeCommand or Action
Enters global configuration mode.configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enters keychain configuration mode for the keychain that
you specified.
key chain name
Example:
Step 2
switch(config)# key chain bgp-keys
switch(config-keychain)#
Enters key configuration mode for the key that you
specified.
key key-ID
Example:
Step 3
switch(config-keychain)# key 13
switch(config-keychain-key)#
Configures an accept lifetime for the key. By default, the
device treats the start-time and end-time arguments as
accept-lifetime [local] start-time duration duration-value
| infinite | end-time]
Step 4
UTC. If you specify the local keyword, the device treats
these times as local times.
Example:
switch(config-keychain-key)# accept-lifetime
00:00:00 Jun 13 2013 23:59:59 Sep 12 2013
The start-time argument is the time of day and date that
the key becomes active.
Specify the end of the lifetime with one of the following
options:
• duration duration-value —The length of the lifetime
in seconds. The maximum length is 2147483646
seconds (approximately 68 years).
• infinite—The accept lifetime of the key never expires.
• end-time —The end-time argument is the time of day
and date that the key becomes inactive.
Configures a send lifetime for the key. By default, the device
treats the start-time and end-time arguments as UTC. If
send-lifetime [local] start-time duration duration-value |
infinite | end-time]
Step 5
you specify the local keyword, the device treats these times
as local times.
Example:
switch(config-keychain-key)# send-lifetime 00:00:00
Jun 13 2013 23:59:59 Aug 12 2013
The start-time argument is the time of day and date that
the key becomes active.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
426
Configuring Keychain Management
Configuring Accept and Send Lifetimes for a Key