2.
key chain name
3.
key key-ID
4.
accept-lifetime
[
local
]
start-time duration duration-value
|
infinite
|
end-time
]
5.
send-lifetime
[
local
]
start-time duration duration-value
|
infinite
|
end-time
]
6.
(Optional)
show key chain name
[
mode decrypt
]
7.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Enters keychain configuration mode for the keychain that
you specified.
key chain name
Example:
Step 2
switch(config)# key chain bgp-keys
switch(config-keychain)#
Enters key configuration mode for the key that you
specified.
key key-ID
Example:
Step 3
switch(config-keychain)# key 13
switch(config-keychain-key)#
Configures an accept lifetime for the key. By default, the
device treats the
start-time
and
end-time
arguments as
accept-lifetime
[
local
]
start-time duration duration-value
|
infinite
|
end-time
]
Step 4
UTC. If you specify the
local
keyword, the device treats
these times as local times.
Example:
switch(config-keychain-key)# accept-lifetime
00:00:00 Jun 13 2013 23:59:59 Sep 12 2013
The
start-time
argument is the time of day and date that
the key becomes active.
Specify the end of the lifetime with one of the following
options:
•
duration duration-value
—The length of the lifetime
in seconds. The maximum length is 2147483646
seconds (approximately 68 years).
•
infinite
—The accept lifetime of the key never expires.
•
end-time
—The
end-time
argument is the time of day
and date that the key becomes inactive.
Configures a send lifetime for the key. By default, the device
treats the
start-time
and
end-time
arguments as UTC. If
send-lifetime
[
local
]
start-time duration duration-value
|
infinite
|
end-time
]
Step 5
you specify the
local
keyword, the device treats these times
as local times.
Example:
switch(config-keychain-key)# send-lifetime 00:00:00
Jun 13 2013 23:59:59 Aug 12 2013
The
start-time
argument is the time of day and date that
the key becomes active.
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
426
Configuring Keychain Management
Configuring Accept and Send Lifetimes for a Key
