HP ProCurve 6400cl Series Access Security Manual page 391

Note
Figure 13-4. Display of Time-Dependent Keys in the Key Chain Entry
Given transmission delays and the variations in the time value from switch to
switch, it is advisable to include some flexibility in the Accept lifetime of the
keys you configure. Otherwise, the switch may disregard some packets
because either their key has expired while in transport or there are significant
time variations between switches.
To list the result of the commands in figure 13-3:
You can use show key-chain to display the key status at the time the command
is issued. Using the information from the example configuration in figures
13-3 and 13-4, if you execute show key-chain at 8:05 on 01/19/03, the display
would appear as follows:
Figure 13-5. Status of Keys in Key Chain Entry "Procurve2"
Key Management System
Configuring Key Chain Management
13-7