Key-Chain; Overview; Command Structure - HP ProCurve 5400zl Reference Manual

OVERVIEW

Category:
Primary context:
Related Commands
Usage: key-chain ASCII-STR
Usage: key-chain ASCII-STR key NUMBER [key-string ASCII-STR]
[accept-lifetime <infinite|<<START-TIME|now> <END-TIME|duration SEC>>>]
[send-lifetime <infinite|<<START-TIME|now> <END-TIME|duration SEC>>>]
Usage: no key-chain ASCII-STR
Usage: no key-chain ASCII-STR key KEY-ID
Description: Configures authentication key chains and individual keys.

COMMAND STRUCTURE

■ [no] key-chain KEY-CHAIN
accept-lifetime
■
date
■
time
■
■
■
© 2009 Hewlett-Packard Development Company, L.P.
Switch Security
config
show (page 511)
The configured key chains can be used for routing protocol
authentication. Refer to routing protocol configuration
commands for supported authentication methods and further
instructions. The first form of command creates a new key
chain unless the identified chain already exists.
The second form of the command allows adding keys to an
existent chain. The third and fourth forms of the command
can be used to delete keys and chains.
Parameters:
- 'key-string ASCII-STR' authentication key to use
(default empty string).
- 'accept-lifetime ...' time and date when to start accepting
the key and when the key is going to expire. The
expiration time is set to 'infinite' by default.
- 'send-lifetime ...' time and date when to start using
the key to send and when the key is going to expire.
A send key is always an accept key too. The expiration
time is set to 'infinite' by default.
Note: The 'accept-lifetime' period must always include the
'send-lifetime' period. If only one of the periods is being
changed then the other period also will be increased/reduced
when it is necessary.
Note: All time values are assumed to be GMT
key < 0 to 255 > -- Configure chain keys. (NUMBER)
-- Set key accept lifetime.
-- Key accept start date. (MM/DD[/[YY]YY])
-- Key accept start time. (HH:MM[:SS])
date -- Key accept stop date. (MM/DD[/[YY]YY])
time -- Key send stop time. (HH:MM[:SS])
■
send-lifetime -- Set key send lifetime.
■
date -- Key send start date. (MM/DD[/[YY]YY])
■
■ additional options available...
infinite -- Set infinite lifetime.
■
now -- Use current day and time.
■
■ additional options available...
duration -- Use current day and time. (NUMBER)
(p. 323)
(p. 323)
(p. 338)
(p. 323)
(p. 338)
(p. 336)
(p. 332)
(p. 334)
(p. 329)

key-chain

(p. 333)
(p. 323)
320