#Ios show passwords keychain update#

RP/0/ RP0/CPU0:router(config)# key chain isis-keysĬonfiguring only the keychain name without any key identifiers is considered a nonoperation. If a time period occurs during which no key is activated, neighbor authentication cannot occur therefore, routing updates can fail.Įxample: RP/0/ RP0/CPU0:router# configure

Therefore, we recommend that for a given keychain, key activation times overlap to avoid any period of time for which no key is activated. Keys cannot be used during time periods for which they are not activated.

#Ios show passwords keychain update#

Then, during a given key's lifetime, routing update packets are sent with this activated key. The lifetime of a key is defined by the following options:Įnd-time-Specifies the absolute time that is relative to the start-time or infinite time.Įach key definition within the keychain must specify a time interval for which that key is activated for example, lifetime. Keychain management groups a sequence of keys together under a keychain and associates each key in the keychain with a lifetime.Īny key that is configured without a lifetime is considered invalid therefore, the key is rejected during configuration. A keychain is a sequence of keys that are collectively managed for authenticating the same peer, peer group, or both. To maintain stability, each party must be able to store and use more than one key for an application at the same time. If you are using keys as the security method, you must specify the lifetime for the keys and change the keys on a regular basis when they expire.