authentication-key-chains
Syntax
authentication-key-chains {
key-chain key-chain-name {
description text-string;
key key {
algorithm (md5 | hmac-sha-1);
key-name authentication-key-name
algorithm (hmac-sha2-224 | hmac-sha2-256| hmac-sha2-384 | hmac-sha2-512);
options (basic | isis-enhanced);
secret secret-data;
start-time yyyy-mm-dd.hh:mm:ss;
}
tolerance seconds;
}
}
Hierarchy Level
[edit security] [edit routing-instances vrf-name protocols bgp group group-name]
Description
Configure authentication key updates for the Border Gateway Protocol (BGP) and the Label
Distribution Protocol (LDP) routing protocols, the Bidirectional Forwarding
Detection (BFD) protocol,
the
Intermediate System-to-Intermediate System (IS-IS)
protocol, and
the Open Shortest Path First (OSPF) protocol. When the
authentication-key-chains statement is configured at the
[edit security] hierarchy level, and is associated with the
BGP, LDP,
IS-IS
protocol, or
OSPF
protocol
at the [edit protocols] hierarchy level or with the BFD protocol
using the bfd-liveness-detection statement, authentication key
updates can occur without interrupting
signaling protocols such as
Resource Reservation Setup Protocol (RSVP).
The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.
Required Privilege Level
admin—To view this statement in the configuration.
admin-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 7.6.
Support for the BFD protocol introduced in Junos OS Release 9.6.
Support for the BFD protocol introduced in Junos OS Release 9.6 for EX Series switches.
Support for IS-IS introduced in JUNOS OS Release 11.2.
Support for HMAC-SHA2 authentication algorithm that includes HMAC-SHA2-256, HMAC-SHA2-384 and HMAC-SHA2-512 for OSPFv2 protocol introduced in Junos OS and Junos OS Evolved Release 24.2R1.
Support for HMAC-SHA2-224 authentication for OSPFv2 protocol introduced in Junos OS and Junos OS Evolved Release 24.2R1.