Nokia 7705 - Page 154

Security
154
System Management Guide
3HE 11018 AAAC TQZZA Edition: 01
now — specifies that the key should become active immediately (current system time)
forever — specifies that the key should always be active
option
Syntax option {basic | isis-enhanced}
no option
Context config>system>security>keychain>direction>bi>entry
Description This command enables options to be associated with the authentication key for IS-IS. The
command is only applicable for IS-IS and will be ignored by other protocols associated with
the keychain.
Default no option
Parameters basic — specifies that IS-IS should use RFC 5304 encoding of the authentication
information
isis-enhanced — specifies that IS-IS should use RFC 5310 encoding of the
authentication information
tolerance
Syntax tolerance {seconds | forever}
no tolerance
Context config>system>security>keychain>direction>bi>entry
config>system>security>keychain>direction>uni>receive>entry
Description This command configures the amount of time that an eligible receive key overlaps with the
currently active key. During that time, packets with either key will be accepted. Tolerance only
applies to received packets. Transmitted packets always use the newest key, regardless of
the tolerance value.
If a tolerance value is set for a key, the key is returned as part of the key set if the current time
is within the key’s begin time, plus or minus the tolerance value. For example, if the begin
time is 12:00 p.m. and the tolerance is 600 seconds, the new key should be included from
11:55 a.m. and the key to be replaced should be included until 12:05 p.m.
Default 300
Parameters seconds — specifies the length of time that an eligible receive key overlaps with the
active key
Values 0 to 4294967294 seconds
forever — specifies that an eligible receive key will overlap with the active key forever