Purpose
Command or Action
You can specify the end of the send lifetime with one of
the following options:
•
duration duration-value
—The length of the lifetime
in seconds. The maximum length is 2147483646
seconds (approximately 68 years).
•
infinite
—The send lifetime of the key never expires.
•
end-time
—The
end-time
argument is the time of day
and date that the key becomes inactive.
Shows the keychain configuration, including the key text
configuration. The mode decrypt option, which can be used
(Optional)
show key chain name
[
mode decrypt
]
Example:
Step 6
by a device administrator only, displays the keys in
cleartext.
switch(config-keychain-key)# show key chain
bgp-keys
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 7
switch(config-keychain-key)# copy running-config
startup-config
Related Topics
Configuring a Master Key and Enabling the AES Password Encryption Feature
, on page 414
Configuring a Key for OSPFv2 Cryptographic Authentication
You can configure message digest 5 (MD5) or hash-based message authentication code secure hash algorithm
(HMAC-SHA) authentication for OSPFv2.
SUMMARY STEPS
1.
configure terminal
2.
key chain name
3.
key key-ID
4.
[
no
]
cryptographic-algorithm
{
HMAC-SHA-1
|
HMAC-SHA-256
|
HMAC-SHA-384
|
HMAC-SHA-512
|
MD5
}
5.
(Optional)
show key chain name
6.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters global configuration mode.
configure terminal
Example:
Step 1
switch# configure terminal
switch(config)#
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
427
Configuring Keychain Management
Configuring a Key for OSPFv2 Cryptographic Authentication
