Cambium Networks PTP 820 Series User Manual page 805

Chapter 17: Radio Configuration (CLI)
To define the master key manually, enter the following command in Payload Encryption view:
Payload Encryption [x/x]> payload encryption mkey
When you press <Enter>, the following prompt appears:
Please enter key:
Enter the master key and press <Enter>. The master key must be between 8 and 32 ASCII characters. The
characters do not appear as you type them. To display the master key and verify that you typed it correctly, enter
the payload encryption status show
output of this command.
To generate the master key automatically, enter the following command in Payload Encryption view:
Payload Encryption [x/x]> master key generate
A random master key is generated. You must copy and paste this key to the other end of the link to ensure that
both sides of the link have the same master key. To display and copy the master key, enter the
encryption status show
command.
6 On the local unit, follow the procedure described in Step 5 to configure the same master key configured on
the remote unit also on the local unit.
7 Enable payload encryption on the remote unit:
i Enter the following command in Payload Encryption view:
Payload Encryption [x/x]> payload encryption mode admin AES-256
This step will cause the link status to be Down until payload encryption is successfully enabled
on the local unit. However, the RSL measured on the link should remain at an acceptable level.
To disable payload encryption, enter the following command in Payload Encryption view:
Payload Encryption [x/1]> payload encryption mode admin Disable
ii The session key is automatically regenerated at defined intervals. To set the session key regeneration
interval, enter the following command in Payload Encryption view:
Payload Encryption [x/1]> payload encryption session-key period set
<00:00-00:00>
Enter the regeneration interval in hours and minutes (HH:MM). For example, the following command
configures fixed radio interface 1 to regenerate the session key every 4 hours and 15 minutes:
Payload Encryption [2/1]> payload encryption session-key period set 04:15
To display the session key regeneration interval, enter the following command in Payload Encryption
view:
Payload Encryption [x/1]> payload encryption session-key period show
Note
The session key regeneration interval must be the same on both sides of the link.
8 Enable payload encryption on the local unit by following the procedure described in Step 7. Verify that on
both the local and remote active units, the link status returns to Up and user traffic is restored. In links using
in-band management, verify also that in-band management returns.
command described above. You can copy the master key from the
command described above. You can copy the master key from the output of this
phn-3965_006v002
Page 17-16
Configuring AES-256 Payload Encryption (CLI)
Payload