486
Parameters
port-number
: Specifies a UDP port number in the range of 1 to 65535.
Usage guidelines
A GDOI KS uses the UDP port number configured in this command to send and receive redundancy
protocol packets to and from other KSs. All KSs in the same GDOI KS group must use the same
UDP port number. Otherwise, redundancy protocol packets cannot be exchanged between the KSs.
Examples
# Set the UDP port number for listening to redundancy protocol packets to 20000.
<Sysname> system-view
[Sysname] gdoi ks redundancy port 20000
Related commands
gdoi ks group
gdoi ks rekey
Use
gdoi ks rekey
to enforce rekey.
Syntax
gdoi ks rekey
[
group
group-name
]
Views
User view
Default command level
2: System level
Parameters
group
group-name
: Specifies a GDOI KS group by its name, a case-sensitive string of 1 to 63
characters. If you do not specify this option, the command clears KS information for all GDOI KS
groups on the local KS.
Usage guidelines
A rekey refers to the process that a KS updates the TEK or KEK key and then sends the updated key
to GMs.
Typically, a GDOI KS performs rekeys periodically. A KEK rekey interval is configured by the
rekey
lifetime
command. A TEK rekey interval is determined by the IPsec SA lifetime. To trigger KSs to
perform rekeys immediately, execute this command.
You can use the
display gdoi ks rekey
command and the
display gdoi ks policy
command to view
rekey statistics and key information.
Examples
# Enforce the GDOI KS group
abc
to rekey.
<Sysname> gdoi ks rekey group abc
identity address
Use
identity address
to configure an IP address for the GDOI KS group.
Use
undo identity
to delete the IP address of the GDOI KS group.
