Avaya Configuring Data Encryption Services Bedienungsanleitung PDF herunterladen (Seite 38)

Configuring Data Encryption Services

3-10 117386-A Rev. A

6. Save the conﬁguration ﬁle.

7. Exit the secure shell by entering

kexit

You return to the regular prompt.

Changing NPKs

You should change NPKs on a router periodically. For many applications, a period

of three to six months is appropriate. To change an NPK, issue the

kset NPK

command as described in the previous section. The new NPK overwrites its

predecessor, and WEP now uses the new NPK value. Remember that you must

enter the new NPK in the Frame Relay or PPP Node Protection key parameter the

next time you want to change your encryption conﬁguration.

Monitoring NPKs

If the NPK on a router does not match the NPK in the MIB, encryption does not

work. This situation occurs most frequently when you change a CPU board on one

slot of a router, and that slot therefore lacks the current NPK.

You can view the log notes to make sure that the NPK for each slot matches the

value of the NPK in the MIB. If they do not match, you can change either the

router NPK value or the MIB NPK value by working in the secure shell of the

router.

To view the log notes, in the Technician Interface enter

log -ffwidt -eKEYMGR

Changing an NPK on a Router

To change the router NPK value, follow the procedure in the previous section,

“Entering an NPK on a Router.”

1 2 ... 33 34 35 36 37 38 39 40 41 42 43 ... 61 62

Keine Kommentare

Avaya Configuring Data Encryption Services Bedienungsanleitung Seite 38