FibeAir IP-20C/S/E
User Guide
Ceragon Proprietary and Confidential
Page 144 of 597
You must use the same master key on both sides of the link. This means
that if you generate a master key automatically on one side of the link, you
must copy that key and for use on the other side of the link. Once payload
encryption has been enabled on both sides of the link, the Key Exchange
Protocol periodically verifies that both ends of the link have the same
master key. If a mismatch is detected, an alarm is raised and traffic
transmission is stopped for the mismatched carrier at both sides of the
link. The link becomes non-valid and traffic stops being forwarded.
When you enter a master key, or when the master key is automatically
generated, the key is hidden behind dots. To copy the master key, you
must display the key. To display the master key, click Show Key. A new
Master key field appears, displaying the master key. You can copy the key
to the clipboard from this field.
Figure 100: Payload Encryption
– Edit Page with Master Key Displayed
5 In the Session Key Period field, configure a time interval in hours and
minutes (HH:MM). This is the interval at which the session key is
automatically regenerated.
6 When you are finished, click Apply.
Note:
Any time payload encryption fails, the Operational status of
the link is Down until payload encryption is successfully
restored.
