378
Examples
# Set the key to
123456
in plaintext form for key 1.
<Sysname> system-view
[Sysname] keychain abc mode absolute
[Sysname-keychain-abc] key 1
[Sysname-keychain-abc-key-1] key-string plain 123456
send-lifetime utc
Use
send-lifetime utc
to set the sending lifetime for a key of a keychain in absolute time mode.
Use
undo send-lifetime
to restore the default.
Syntax
send-lifetime
utc
start-time
start-date
{
duration
{
duration-value
|
infinite
} |
to
end-time end-date
}
undo send-lifetime
Default
The sending lifetime is not configured for a key of a keychain.
Views
Key view
Predefined user roles
network-admin
Parameters
start-time
: Specifies the start time in the HH:MM:SS format. The value range for this argument is
0:0:0 to 23:59:59.
start-date
: Specifies the start date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for
YYYY is 2000 to 2035.
duration
duration-value
: Specifies the lifetime of the key, in the range of 1 to 2147483646 seconds.
duration
infinite
: Specifies that the key never expires after it becomes valid.
to
: Specifies the end time and date.
end-time
: Specifies the end time in the HH:MM:SS format. The value range for this argument is 0:0:0
to 23:59:59.
end-date
: Specifies the end date in the MM/DD/YYYY or YYYY/MM/DD format. The value range for
YYYY is 2000 to 2035.
Usage guidelines
A key becomes a valid send key when the following requirements are met:
•
A key string has been configured.
•
An authentication algorithm has been specified.
•
The system time is within the specified sending lifetime.
To make sure only one key in a keychain is used at a time to authenticate packets to a peer, set
non-overlapping sending lifetimes for the keys in the keychain.
Examples
# Set the sending lifetime for key 1 of the keychain
abc
in absolute time mode.
<Sysname> system-view
[Sysname] keychain abc mode absolute
Summary of Contents for FlexNetwork MSR Series
Page 1005: ...987 ...
