Key bindings configuration
accept-lifetime
This command defines the period of time during which this key can be used to authenticate received packets.
The use of a negative form (no) of the command sets the default value.
Syntax
accept-lifetime <TIME_B> <DAY_B> <MONTH_B> <YEAR_B> <TIME_E> <DAY_E> <MONTH_E> <YEAR_E>
no accept-lifetime
Parameters
<TIME_B> – set time to start using the key, is given as HH: MM: SS, where:
- HH – hours, takes the value of [0..23];
- MM – minutes, takes the value of [0 ..59];
- SS – seconds, takes the value of [0..59];
<DAY_B> – the day of the month when the key was first used, takes the values [1..31];
<MONTH_B> – month of the start of key usage, takes values:
- January;
- February;
- March;
- April;
- May;
- June;
- July;
- August;
- September;
- October;
- November;
- December;
<YEAR_B> – the year when the key was first used, takes the values [2001..2037].
<TIME_E> – set time to end using the key, is given as HH: MM: SS, where:
- HH – hours, takes the value of [0..23];
- MM – minutes, takes the value of [0 ..59];
- SS – seconds, takes the value of [0..59];
<DAY_E> – the day of the month when the key is ending, takes the values [1..31];
<MONTH_E> – month of the end of key usage, takes values:
- January;
- February;
- March;
- April;
- May;
- June;
- July;
- August;
- September;
- October;
- November;
- December;
<YEAR_E> – the year when the key is ending, takes the values [2001..2037].
Default value
The key is valid constantly.
Required privilege level
15
Command mode
CONFIG-KEYCHAIN-KEY
Example
esr(config-keychain-key)# accept-lifetime 16:35:00 10 May 2015 16:35:00 10 June 2021
key
The command adds a key to the key chain and switches to its configuration mode.
The use of a negative form (no) of the command removes a specified key.
Syntax
[no] key <ID>
Parameters
<ID> – key identifier, set in the range of [0..255].
Required privilege level
15
Command mode
CONFIG-KEYCHAIN
Example
esr(config-keychain)# key 25
key-chain
The command adds a key chain to the system and switches to its configuration mode.
The use of a negative form (no) of the command removes a specified list.
Syntax
[no] key-chain <KEYCHAIN>
Parameters
<KEYCHAIN> – key list identifier, set by the string of up to 16 ASCII characters.
Required privilege level
15
Command mode
CONFIG
Example
esr(config)# key-chain lock
key-string
The command sets an authentication password.
The use of a negative form (no) of the command removes the password.
Syntax
key-string ascii-text { <CLEAR-TEXT> | encrypted <ENCRYPTED-TEXT> }
no key-string
Parameters
<CLEAR-TEXT> – password of 8 to 16 bytes;
<ENCRYPTED-TEXT> – encrypted password of 8 to 16 bytes (from 16 to 32 characters) in hexadecimal format (0xYYYY ...) or (YYYY ...).
Required privilege level
15
Command mode
CONFIG-KEYCHAIN-KEY
Example
esr(config-keychain-key)# key-string ascii-text 123456789
esr(config-keychain-key)# key-string ascii-text encrypted CDE65039E5591FA3F1
send-lifetime
This command defines the period of time during which this key can be used to authenticate when sending packets.
The use of a negative form (no) of the command sets the default value.
Syntax
send-lifetime <TIME_B> <DAY_B> <MONTH_B> <YEAR_B> <TIME_E> <DAY_E> <MONTH_E> <YEAR_E>
no send-lifetime
Parameters
<TIME_B> – set time to start using the key, is given as HH: MM: SS, where:
- HH – hours, takes the value of [0..23];
- MM – minutes, takes the value of [0 ..59];
- SS – seconds, takes the value of [0..59];
<DAY_B> – the day of the month when the key was first used, takes the values [1..31];
<MONTH_B> – the month when the key was first used, takes the values [January/February/March/April/May/June/July/August/September/October/November/
December];
<YEAR_B> – the year when the key was first used, takes the values [2001..2037];
<TIME_E> – set time to end using the key, is given as HH: MM: SS, where:
- HH – hours, takes the value of [0..23];
- MM – minutes, takes the value of [0 ..59];
- SS – seconds, takes the value of [0..59];
<DAY_E> – the day of the month when the key is ending, takes the values [1..31];
<MONTH_E> – the month when the key is ending, takes the values [January/February/March/April/May/June/July/August/September/October/November/December];
<YEAR_E> – the year when the key is ending, takes the values [2001..2037].
Default value
The key is valid constantly.
Required privilege level
15
Command mode
CONFIG-KEYCHAIN-KEY
Example
esr(config-keychain-key)# send-lifetime 16:35:00 15 May 2014 16:35:00 21 June 2018