Purpose
Command or Action
Enters keychain configuration mode for the keychain that
you specified.
key chain name
Example:
Step 2
switch(config)# key chain bgp-keys
switch(config-keychain)#
Enters key configuration mode for the key that you
specified. The
key-ID
argument must be a whole number
between 0 and 65535.
key key-ID
Example:
switch(config-keychain)# key 13
switch(config-keychain-key)#
Step 3
Configures the OSPFv2 cryptographic algorithm to be used
for the specified key. You can configure only one
cryptographic algorithm per key.
[
no
]
cryptographic-algorithm
{
HMAC-SHA-1
|
HMAC-SHA-256
|
HMAC-SHA-384
|
HMAC-SHA-512
|
MD5
}
Example:
Step 4
switch(config-keychain-key)#
cryptographic-algorithm HMAC-SHA-1
Shows the keychain configuration.
(Optional)
show key chain name
Example:
Step 5
switch(config-keychain-key)# show key chain
bgp-keys
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 6
switch(config-keychain-key)# copy running-config
startup-config
Determining Active Key Lifetimes
To determine which keys within a key chain have active accept or send lifetimes, use the command in this
table.
Purpose
Command
Displays the key chains configured on the device.
show key chain
Verifying the Keychain Management Configuration
To display keychain management configuration information, perform the following task:
Purpose
Command
Displays the keychains configured on the device.
show key chain name
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
428
Configuring Keychain Management
Determining Active Key Lifetimes
