Avaya Configuring IPsec Services Manual de usuario descargar pdf (Pagina 43)

Installing IPsec

308630-15.1 Rev 00

2-7

Type a random set of keystrokes. The secure shell informs you when you

have typed the required number of keystrokes.

Enter the following command:

kset npk 0x<NPK_value>

<NPK_value>

is the 16-digit hexadecimal NPK value that you assigned to the

router that you are configuring. For more information, see “

Generating

NPKs” on page 2-5.

The

kset npk

command stores your NPK value in the router NVRAM and

calculates a hash of this value that it stores in the router MIB.

Save the configuration by entering:

save config

<config_file_name>

onfig_file_name

is the name that you assign to the configuration file. You

cannot exit the secure shell without saving the configuration. This step is

necessary so that when you reboot the router with the saved configuration file,

the hash of the NPK in the MIB corresponds to the NPK in NVRAM.

Exit the secure shell by entering the following command:

kexit

Changing an NPK

To maintain security, periodically change the NPK on each router.

To change an NPK:

At the Technician Interface prompt, enter the secure shell by entering the

following command:

ksession

Enter your password.

The prompt changes to

SSHELL.

Begin generating the encryption seed by entering:

kseed

The secure shell prompts you for a random seed value.

Type a random set of keystrokes. The secure shell informs you when you

have typed the required number of keystrokes.

1 2 ... 38 39 40 41 42 43 44 45 46 47 48 ... 121 122

Sin comentarios

Avaya Configuring IPsec Services Manual de usuario Pagina 43