K Commands

key-chain macsec-psk no-show

[no] key-chain macsec-psk no-show

Syntax Description

no

(Optional) Negate a command or set its defaults

key-chain

Keychain Management

macsec-psk

Macsec Pre-shared key

no-show

do not show

Command Mode

  • /exec/configure

key-chain tunnelencrypt-psk no-show

[no] key-chain tunnelencrypt-psk no-show

Syntax Description

no

(Optional) Negate a command or set its defaults

key-chain

Keychain Management

tunnelencrypt-psk

Tunnel-encryption Pre-shared key

no-show

do not show

Command Mode

  • /exec/configure

key-octet-string 6 cryptographic-algorithm AES_128_CMAC

{ key-octet-string 6 <keystring> cryptographic-algorithm AES_128_CMAC }

Syntax Description

key-octet-string

Set key octet string

6

Encryption Type - Proprietary (type-6 encrypted)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_128_CMAC

cryptographic-algorithm AES-128-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string 6 cryptographic-algorithm AES_256_CMAC

{ key-octet-string 6 <keystring> cryptographic-algorithm AES_256_CMAC }

Syntax Description

key-octet-string

Set key octet string

6

Encryption Type - Proprietary (type-6 encrypted)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_256_CMAC

cryptographic-algorithm AES-256-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string 7 cryptographic-algorithm AES_128_CMAC

{ key-octet-string 7 <keystring> cryptographic-algorithm AES_128_CMAC }

Syntax Description

key-octet-string

Set key octet string

7

Encryption Type - Proprietary

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_128_CMAC

cryptographic-algorithm AES-128-CMAC

Command Mode

  • /exec/configure/tunnelencryptkeychain-key

key-octet-string 7 cryptographic-algorithm AES_128_CMAC

{ key-octet-string 7 <keystring> cryptographic-algorithm AES_128_CMAC }

Syntax Description

key-octet-string

Set key octet string

7

Encryption Type - Proprietary

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_128_CMAC

cryptographic-algorithm AES-128-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string 7 cryptographic-algorithm AES_256_CMAC

{ key-octet-string 7 <keystring> cryptographic-algorithm AES_256_CMAC }

Syntax Description

key-octet-string

Set key octet string

7

Encryption Type - Proprietary

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_256_CMAC

cryptographic-algorithm AES-256-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string 7 cryptographic-algorithm AES_256_CMAC

{ key-octet-string 7 <keystring> cryptographic-algorithm AES_256_CMAC }

Syntax Description

key-octet-string

Set key octet string

7

Encryption Type - Proprietary

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_256_CMAC

cryptographic-algorithm AES-256-CMAC

Command Mode

  • /exec/configure/tunnelencryptkeychain-key

key-octet-string cryptographic-algorithm AES_128_CMAC

{ key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_128_CMAC | no key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_128_CMAC | no key-octet-string }

Syntax Description

no

Negate a command or set its defaults

key-octet-string

Set key octet string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_128_CMAC

cryptographic-algorithm AES-128-CMAC

Command Mode

  • /exec/configure/tunnelencryptkeychain-key

key-octet-string cryptographic-algorithm AES_128_CMAC

{ key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_128_CMAC | no key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_128_CMAC | no key-octet-string }

Syntax Description

no

Negate a command or set its defaults

key-octet-string

Set key octet string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_128_CMAC

cryptographic-algorithm AES-128-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string cryptographic-algorithm AES_256_CMAC

{ key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_256_CMAC | no key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_256_CMAC | no key-octet-string }

Syntax Description

no

Negate a command or set its defaults

key-octet-string

Set key octet string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_256_CMAC

cryptographic-algorithm AES-256-CMAC

Command Mode

  • /exec/configure/macseckeychain-key

key-octet-string cryptographic-algorithm AES_256_CMAC

{ key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_256_CMAC | no key-octet-string [ 0 ] <keystring> cryptographic-algorithm AES_256_CMAC | no key-octet-string }

Syntax Description

no

Negate a command or set its defaults

key-octet-string

Set key octet string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key octet string

cryptographic-algorithm

Select CMAC algorithm for authentication

AES_256_CMAC

cryptographic-algorithm AES-256-CMAC

Command Mode

  • /exec/configure/tunnelencryptkeychain-key

key-server-priority

[no] key-server-priority <pri>

Syntax Description

key-server-priority

Configure Key-Server priority

pri

key-server priority value

Command Mode

  • /exec/configure/macsec-policy

key-string

{ key-string [ 0 ] <keystring> | no key-string }

Syntax Description

no

Negate a command or set its defaults

key-string

Set key string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key string

Command Mode

  • /exec/configure/tcpkeychain-key

key-string

{ key-string [ 0 ] <keystring> | no key-string }

Syntax Description

no

Negate a command or set its defaults

key-string

Set key string

0

(Optional) Encryption Type - No Encryption(default)

keystring

key string

Command Mode

  • /exec/configure/keychain-key

key-string 6

{ key-string 6 <keystring> }

Syntax Description

key-string

Set key string

6

Encryption Type - Proprietary (type-6 encrypted)

keystring

key string

Command Mode

  • /exec/configure/keychain-key

key-string 6

{ key-string 6 <keystring> }

Syntax Description

key-string

Set key string

6

Encryption Type - Proprietary (type-6 encrypted)

keystring

key string

Command Mode

  • /exec/configure/tcpkeychain-key

key-string 7

{ key-string 7 <keystring> }

Syntax Description

key-string

Set key string

7

Encryption Type - Proprietary

keystring

key string

Command Mode

  • /exec/configure/tcpkeychain-key

key-string 7

{ key-string 7 <keystring> }

Syntax Description

key-string

Set key string

7

Encryption Type - Proprietary

keystring

key string

Command Mode

  • /exec/configure/keychain-key

key

[no] key <keyid>

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Configure a TCP-AO key

keyid

Key identifier

Command Mode

  • /exec/configure/tcpkeychain

key

[no] key <keyid>

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Configure a key

keyid

Key identifier

Command Mode

  • /exec/configure/keychain

key

[no] key <macsec_keyid>

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Configure a macsec key

macsec_keyid

MACsec Key identifier ranging from 1 octet to 32

Command Mode

  • /exec/configure/macseckeychain

key

[no] key <tunnelencryption_keyid>

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Configure a tunnelencryption key

tunnelencryption_keyid

Tunnel-encryption Key identifier ranging from 1 octet to 32

Command Mode

  • /exec/configure/tunnelencryptkeychain

key chain

[no] key chain <keychain>

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Key Management

chain

Keychain Management

keychain

key-chain name

Command Mode

  • /exec/configure

key chain macsec

[no] key chain <keychain> macsec

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Key Management

chain

Keychain Management

keychain

macsec key-chain name

macsec

Macsec Keychain

Command Mode

  • /exec/configure

key chain tcp

[no] key chain <keychain> tcp

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Key Management

chain

Keychain Management

keychain

key-chain name

tcp

TCP-AO Keychain

Command Mode

  • /exec/configure

key chain tunnel-encryption

[no] key chain <keychain> tunnel-encryption

Syntax Description

no

(Optional) Negate a command or set its defaults

key

Key Management

chain

Keychain Management

keychain

tunnel-encryption key-chain name

tunnel-encryption

Tunnel-encryption Keychain

Command Mode

  • /exec/configure

keychain

[no] [ keychain <keychain_name> | pki ] [ policy <policy_name> ]

Syntax Description

keychain

(Optional) Key Chain

keychain_name

(Optional) Name of keychain specified as a string

pki

(Optional) Peer pki config

policy

(Optional) policy

policy_name

(Optional) name of the policy specified as a string

Command Mode

  • /exec/configure/tunenc-peer

kill background

kill background <pid>

Syntax Description

kill

terminate processes

background

kill background processes (started with 'source background <file>' command)

pid

background script to terminate, by process-id or just a regex matching any line from 'show background' command

Command Mode

  • /exec

kme server

{ [ no ] kme server <hostipname> { [ port <port-num> ] } }

Syntax Description

kme

Key Management Entity

server

Key Management Entity Server

hostipname

IPV4 address or DNS name

port

(Optional) KME server port number

port-num

(Optional) port number for kme server

Command Mode

  • /exec/configure/crypto-profile

kubernetes server ip-address port

[no] kubernetes server ip-address <ip-addr> port <s0> [ vrf <vrf-name> ] | no kubernetes server

Syntax Description

no

(Optional) Negate a command or set its defaults

kubernetes

kubernetes

server

kubernetes server

ip-address

IP address of the kubernetes host

ip-addr

ip address of kubernetes Host

port

Port number of the host

s0

port number

vrf

(Optional) Display per-VRF information

vrf-name

(Optional) VRF name

Command Mode

  • /exec/configure

kvfib file

kvfib file [ debug <debug_flag> ] [ size <filesize> ] [ maxfiles <nfiles> ] [ recycle <recycle_flag> ]

Syntax Description

kvfib

KVFIB

file

Write debugs to a file

debug

(Optional) file debug enable/disable

debug_flag

(Optional) 0 - disable, 1 - enable

size

(Optional) Specify max. size of debug file

filesize

(Optional) Debug file size in MBytes

maxfiles

(Optional) Specify max. number of debug files

nfiles

(Optional) Max. number of debug files to be created

recycle

(Optional) Recycle files when they become full

recycle_flag

(Optional) 0 - disable, 1 - enable

Command Mode

  • /exec