User Guide for FibeAir® IP-20 All-Outdoor Products, CeraOS 10.5
Page 542 of 825
Ceragon Proprietary and Confidential
To display the session key regeneration interval, enter the following
command in Payload Encryption view:
Payload Encryption [2/x]> payload encryption session-key period
show
Note:
The session key regeneration interval must be the same on both sides
of the link.
8 Enable payload encryption on the local unit by following the procedure
described in Step 7. Verify that on both the local and remote active units, the
link status returns to Up and user traffic is restored. In links using in-band
management, verify also that in-band management returns.
9 In a protected link, perform copy-to-mate, first on the remote and then on the
local unit. See Step 3 in
Configuring HSB Radio Protection (CLI)
. After the copy-
to-mate operation, wait for both standby units to re-boot and verify that
there are no alarms.
Note:
The standby unit may have a
payload encryption failure
alarm for up to
about one minute after the unit is up and running.
10 In a protected link, remove the protection lockout, first on the remote and
Disabling Automatic Switchover to the Standby Unit
11 Verify that there are no alarms on the link.
You can set all master keys defined on the unit to zero value. To zeroize the
master keys, enter the following command in root view:
root> payload encryption key zeroize
Warning!
Executing this command on a FIPS-enabled unit
formats the unit’s disk,
and renders the unit non-operational. If it is necessary to use this
command, contact Ceragon Technical Support for instructions how to
re-configure the unit.
This command has no effect on units that are not enabled for FIPS.
Note:
Any time payload encryption fails, the Operational status of the link is
Down until payload encryption is successfully restored.
