Cisco Nexus 9000 Series Configuration Manual page 452

Configuring Accept and Send Lifetimes for a Key
2. key chain name
3. key key-ID
4. accept-lifetime [local] start-time duration duration-value | infinite | end-time]
5. send-lifetime [local] start-time duration duration-value | infinite | end-time]
6. (Optional) show key chain name [mode decrypt]
7. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1 configure terminal
Example:
switch# configure terminal
switch(config)#
Step 2
key chain name
Example:
switch(config)# key chain bgp-keys
switch(config-keychain)#
Step 3 key key-ID
Example:
switch(config-keychain)# key 13
switch(config-keychain-key)#
Step 4
accept-lifetime [local] start-time duration duration-value
| infinite | end-time]
Example:
switch(config-keychain-key)# accept-lifetime
00:00:00 Jun 13 2013 23:59:59 Sep 12 2013
Step 5 send-lifetime [local] start-time duration duration-value |
infinite | end-time]
Example:
switch(config-keychain-key)# send-lifetime 00:00:00
Jun 13 2013 23:59:59 Aug 12 2013
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
426
Purpose
Enters global configuration mode.
Enters keychain configuration mode for the keychain that
you specified.
Enters key configuration mode for the key that you
specified.
Configures an accept lifetime for the key. By default, the
device treats the start-time and end-time arguments as
UTC. If you specify the local keyword, the device treats
these times as local times.
The start-time argument is the time of day and date that
the key becomes active.
Specify the end of the lifetime with one of the following
options:
• duration duration-value —The length of the lifetime
in seconds. The maximum length is 2147483646
seconds (approximately 68 years).
• infinite—The accept lifetime of the key never expires.
• end-time —The end-time argument is the time of day
and date that the key becomes inactive.
Configures a send lifetime for the key. By default, the device
treats the start-time and end-time arguments as UTC. If
you specify the local keyword, the device treats these times
as local times.
The start-time argument is the time of day and date that
the key becomes active.
Configuring Keychain Management