DGS-6604
m
key chain
CLI Reference Guide
376
Example
The following example configures a key chain named chain1. Key1 named
"forkey1string" will be accepted from 1:30 p.m. to 3:30 p.m. and be sent from
2:00 p.m. to 3:00 p.m. Key3 named "forkey3string" will be accepted from 2:30
p.m. to 4:30 p.m. and be sent from 3:00 p.m. to 4:00 p.m.
To verify the settings, use the
show ip key-chain
command.
Switch(config)# interface vlan1
Switch(config-if)# ip rip authentication key-chain chain1
Switch(config-if)# ip rip authentication mode text
Switch(config-if)# exit
Switch(config)# router rip
Switch(config-router)# network 172.19.0.0/8
Switch(config-router)# version 2
Switch(config-router)# exit
Switch(config)# key chain chain1
Switch(config-keychain)# key 1
Switch(config-keychain-key)# key-string forkey1string
Switch(config-keychain-key)# accept-lifetime 13:30:00 Jan 25 2009 duration 7200
Switch(config-keychain-key)# send-lifetime 14:00:00 Jan 25 2009 duration 3600
Switch(config-keychain-key)# exit
Switch(config-keychain)# key 3
Switch(config-keychain-key)# key-string forkey3string
Switch(config-keychain-key)# accept-lifetime 14:30:00 Jan 25 2009 duration 7200
Switch(config-keychain-key)# send-lifetime 15:00:00 Jan 25 2009 duration 3600
Switch(config-keychain-key)# end