Key-chain key configuration commands:
accept-lifetime Set accept lifetime of key #设置开始使用时间和失效时间,特别注意,accept lifetime 和 send lifetime 是单向配置的,相当于DCE、DTE的时钟
default Set a command to its defaults
exit Exit from key-chain key configuration mode
key-string Set key string #设置密钥串
no Negate a command or set its defaults
send-lifetime Set send lifetime of key #设置失效时间
Building configuration...
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname R1
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
!
!
ip cef
!
!
!
key chain test #密钥链名
key 100 #密钥号码
key-string 123456 #密钥
accept-lifetime local 20:00:00 Apr 1 2009 duration 60 #密钥的启用时间和生存时间
!
!
!
!
!
!
interface Loopback0
ip address 1.1.1.1 255.0.0.0
!
interface FastEthernet0/0
ip address 192.168.1.1 255.255.255.0
ip rip authentication mode md5 #RIP认证的方式,此处为md5加密
ip rip authentication key-chain test #在F0/0接口下应用名为test的密钥链
duplex half
!
interface Ethernet1/0
no ip address
shutdown
duplex half
!
interface Ethernet1/1
no ip address
shutdown
duplex half
!
interface Ethernet1/2
no ip address
shutdown
duplex half
!
interface Ethernet1/3
no ip address
shutdown
duplex half
!
router rip
version 2
network 1.0.0.0
network 192.168.1.0
!
ip classless
no ip http server
!
!
!
!
!
gatekeeper
shutdown
!
!
line con 0
transport preferred all
transport output all
stopbits 1
line aux 0
line vty 0 4
!
!
end
连的路由器对应;