System Management Guide Security
Edition: 01 3HE 11018 AAAC TQZZA 153
hash2 — specifies that the key is entered in a more complex encrypted form that
involves more variables than the key value alone, meaning that the hash2 encrypted
variable cannot be copied and pasted. If the hash or hash2 parameter is not used,
the key is assumed to be in an unencrypted, clear text form. For security, all keys are
stored in encrypted form in the configuration file with the hash or hash2 parameter
specified.
algorithm — the encryption algorithm to be used by the key defined in the keychain
Values aes-128-cmac-96 — specifies an algorithm based on the AES
standard for TCP authentication (BGP and LDP)
hmac-sha-1-96 — specifies an algorithm based on SHA-1 for OSPF,
RSVP-TE, and TCP authentication
password — specifies a simple password authentication for OSPF
and IS-IS
message-digest — specifies the MD5 hash authentication for OSPF
hmac-sha-1 — specifies the SHA-1 algorithm for OSPF, IS-IS, and
RSVP-TE authentication
hmac-sha-256 — specifies the SHA-256 algorithm for OSPF, IS-IS,
and RSVP-TE authentication
hmac-md5 — specifies the MD5 hash authentication for IS-IS and
RSVP-TE
begin-time
Syntax begin-time date hours-minutes [UTC]
begin-time {now | forever}
no begin-time
Context config>system>security>keychain>direction>bi>entry
config>system>security>keychain>direction>uni>receive>entry
config>system>security>keychain>direction>uni>send>entry
Description This command specifies the calendar date and time after which the key specified by the
keychain authentication key entry is used to sign and/or authenticate the protocol stream.
Each entry within a bidirectional keychain or for a keychain direction (if unidirectional keys are
used) must have a unique begin time.
If no date and time is set, the begin-time is represented by a date and time string with all
NULLs and the key is not valid.
Default forever
Parameters date hours-minutes — the date (in YYYY/MM/DD format) and time (in hh:mm[:ss] format)
at which the key becomes active
UTC — specifies that the date and time should be in UTC time rather than local time
To Next Page
Loading...
