Cisco SX350 Series Administration Manual page 456

Security
Key Management
STEP 3
Cisco Sx350, SG350X, SG350XG, Sx550X & SG550XG Series Managed Switches, Firmware Release 2.2.5.x
- User Defined (Plaintext)—Enter a plaintext version
Both the Accept Life Time and the Send LifeTime values can be entered. The
NOTE
Accept Life Time indicates when the key-identifier for receiving packets is valid. The
Send Life Time indicates when the key-identifier for sending packets is valid.
• Accept Life Time/Send Life Time—Specifies when packets with this key are
accepted. Select one of the following options.
- Always Valid—No limit to the life of the key-identifier.
- User Defined—Life of the key-chain is limited. If this option, is selected enter
values in the following fields.
If you select User Defined, the system time must be set either manually or from
NOTE
SNTP. Otherwise, Accept Life Time and Send Life Times always fail.
The following fields are relevant for the Accept Life Time and Send Life Time fields:
• Start Date—Enter the earliest date that the key-identifier is valid.
• Start Time—Enter the earliest time that the key-identifier is valid on the Start Date.
• End Time—Specifies the last date that the key-identifier is valid. Select one of the
following options.
- Infinite—No limit to the life of the key-identifier.
- Duration—Life of the key-identifier is limited. If this option, is selected enter
values in the following fields.
• Duration—Length of time that the key identifier is valid. Enter the following fields:
- Days—Number of days that the key-identifier is valid.
- Hours—Number of hours that the key-identifier is valid.
- Minutes—Number of minutes that the key-identifier is valid.
- Seconds—Number of seconds that the key-identifier is valid.
Click Apply. The settings are written to the Running Configuration file.
Key Settings
To add a key to an already existing key chain.
16
300