Configuring A Key For Ospfv2 Cryptographic Authentication - Cisco Nexus 9000 Series Configuration Manual

Configuring Keychain Management
Command or Action
Step 6
(Optional) show key chain name [mode decrypt]
Example:
switch(config-keychain-key)# show key chain
bgp-keys
Step 7 (Optional) copy running-config startup-config
Example:
switch(config-keychain-key)# copy running-config
startup-config
Related Topics

Configuring a Key for OSPFv2 Cryptographic Authentication

You can configure message digest 5 (MD5) or hash-based message authentication code secure hash algorithm
(HMAC-SHA) authentication for OSPFv2.
SUMMARY STEPS
1. configure terminal
2. key chain name
3. key key-ID
4. [no] cryptographic-algorithm {HMAC-SHA-1 | HMAC-SHA-256 | HMAC-SHA-384 |
HMAC-SHA-512 | MD5}
5. (Optional) show key chain name
6. (Optional) copy running-config startup-config
DETAILED STEPS
Command or Action
Step 1
configure terminal
Example:
switch# configure terminal
switch(config)#
Configuring a Master Key and Enabling the AES Password Encryption
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
Configuring a Key for OSPFv2 Cryptographic Authentication
Purpose
You can specify the end of the send lifetime with one of
the following options:
• duration duration-value —The length of the lifetime
in seconds. The maximum length is 2147483646
seconds (approximately 68 years).
• infinite—The send lifetime of the key never expires.
• end-time —The end-time argument is the time of day
and date that the key becomes inactive.
Shows the keychain configuration, including the key text
configuration. The mode decrypt option, which can be used
by a device administrator only, displays the keys in
cleartext.
Copies the running configuration to the startup
configuration.
Feature, on page 414
Purpose
Enters global configuration mode.
427