Chapter 38
Configuring IP Unicast Routing
You can configure multiple keys with life times. Only one authentication packet is sent, regardless of
how many valid keys exist. The software examines the key numbers in order from lowest to highest and
uses the first valid key it encounters. The lifetimes allow for overlap during key changes. Note that the
router must know these lifetimes.
Beginning in privileged EXEC mode, follow these steps to manage authentication keys:
Command
Step 1
configure terminal
Step 2
key chain name-of-chain
Step 3
key number
Step 4
key-string text
Step 5
accept-lifetime start-time {infinite | end-time | duration
seconds}
Step 6
send-lifetime start-time {infinite | end-time | duration
seconds}
Step 7
end
Step 8
show key chain
Step 9
copy running-config startup-config
To remove the key chain, use the no key chain name-of-chain global configuration command.
OL-12247-04
Purpose
Enter global configuration mode.
Identify a key chain, and enter key chain configuration
mode.
Identify the key number. The range is 0 to 2147483647.
Identify the key string. The string can contain from 1 to
80 uppercase and lowercase alphanumeric characters,
but the first character cannot be a number.
(Optional) Specify the time period during which the key
can be received.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
(Optional) Specify the time period during which the key
can be sent.
The start-time and end-time syntax can be either
hh:mm:ss Month date year or hh:mm:ss date Month
year. The default is forever with the default start-time
and the earliest acceptable date as January 1, 1993. The
default end-time and duration is infinite.
Return to privileged EXEC mode.
Display authentication key information.
(Optional) Save your entries in the configuration file.
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
Configuring Protocol-Independent Features
38-107