Avaya Cajun P882 User Manual page 404

Chapter 10
Key Chains on
the Avaya
Multiservice
Switch
Configuring the
Key Chain using
the Web Agent
10-8
In a simple implementation, the user creates one Key in a Key
Chain and this key is used until it expires.In an advanced
implementation, a Key Chain contains multiple keys each valid for a
limited amount of time. This provides a periodic change of the
encryption key giving the highest level of security. The drawback to
this approach is that every device participating in an exchange, such
as RIP V2 routers on the same subnet, must have their clocks
synchronized. Failure to synchronize would cause devices to use
different keys and hence reject RIP updates from neighboring RIP
routers.
The Avaya Multiservice switch supports the creation of a single Key
Chain with a single Key. Hence, Key and Key Chain are
interchangeable terms. The Key has a setting for a start time and
duration. Regardless of duration, the Key's start time must be set,
even if the duration is set to infinity.
If the duration is less than 4294967295 seconds, the Key will expire.
Ironically, this number is approximately 136 years. A more realistic
number would be 18000 seconds (5 Hours). For this time interval,
the RIP V2 interface would exchange routes with other RIP V2
routers in the same subnet. Once expired, the RIP V2 interface
would no longer accept RIP packets from RIP V2 routers on that
subnet.
If the Key's duration is 4294967295 (alternately -1), the key never
expires. Again, if you use this value, you must still specify a Key
Accept Time. Failure to do so will result in the Avaya switch not
creating the Key.
You can configure Key Chains using the Web Agent or the CLI.
To create a Key Chain/Key using the Web Agent:
1. Select Key Chain from the Routing > IP > RIP group on
the Web Agent window. The Key Chain dialog box opens
(Figure 10-5.)
Avaya P550R, P580, P880, and P882 Multiservice Switch User Guide,v5.3.1