Security
Key Management
Cisco 350XG & 550XG Series 10G Stackable Managed Switches
401
19
Key Chain
To create a new key chain.
STEP 1
Click
Security
>
Key Management
>
Key Chain Settings
.
STEP 2
To add a new key chain, click Add to open the Add Key Chain page and enter the
following fields:
•
Key Chain
—Name for the key chain.
•
Key Identifier
—Integer identifier for the key chain.
•
Key String
—Value of the key chain string. Enter one of the following options:
-
User Defined (Encrypted)—
Enter an encrypted version.
-
User Defined (Plaintext)—
Enter a plaintext version
NOTE
Both the Accept Life Time and the Send LifeTime values can be
entered. The Accept Life Time indicates when the key-identifier for receiving
packets is valid. The Send Life Time indicates when the key-identifier for
sending packets is valid.
•
Accept Life Time/Send Life Time
—Specifies when packets with this key
are accepted. Select one of the following options.
-
Always Valid
—No limit to the life of the key-identifier.
-
User Defined
—Life of the key-chain is limited. If this option, is selected
enter values in the following fields.
NOTE
If you select User Defined, the system time must be set either
manually or from SNTP. Otherwise, Accept Life Time and Send Life Times
always fail.
The following fields are relevant for the
Accept Life Time
and
Send Life Time
fields:
•
Start Date
—Enter the earliest date that the key-identifier is valid.
•
Start Time
—Enter the earliest time that the key-identifier is valid on the Start
Date.
•
End Time
—Specifies the last date that the key-identifier is valid. Select one
of the following options.
-
Infinite
—No limit to the life of the key-identifier.
