
Configuring IP Security Services
3-4
304111-A Rev 00
Entering the NPK on the Router
You enter the NPK into a router locally, using the console port and the secure shell
section of the Technician Interface. A password protects access to the secure shell.
You cannot access the NPK or the password using the MIB or the routine
Technician Interface debug commands. Nor can you invoke the secure shell in a
Telnet session.
Entering an NPK and a Seed for Encryption
Before you can add IPsec to a router, you must enter an NPK and create a seed for
encryption using the Technician Interface secure shell. IPsec uses the NPK to
encrypt and decrypt the cipher and integrity keys, and it uses the seed specified
with the
kseed
command to encrypt data.
To enter an NPK and a seed for encryption:
1.
If you do not have a password for the Technician Interface secure shell, you
must create one. Enter
kpassword
<password>.
For password, enter an alphanumeric value up to 16 characters.
2.
At the Technician Interface prompt, type
ksession
to enter the Technician
Interface secure shell. (If you issue the
ksession
command before setting a
password, you will be prompted to do so. Use
kpassword
and step 1.)
3.
Enter the
kseed
command. The secure shell prompts you for a random seed
value.
Type a random set of keystrokes. The secure shell informs you when you have
entered the required number of keystrokes.
4.
Type
kset npk 0x
<NPK_value>.
Type
0x
and the 16-digit hexadecimal NPK value that you assigned to the
router that you are configuring. For more information, see “Generating and
Using NPKs” on page 3-3.
Caution:
Never use a terminal server to enter the NPK. Instead, use a laptop
computer that you can attach directly to the router. Protect the file containing
NPKs on the laptop.
Comentários a estes Manuais