R3303-HP HSR6800 Routers Security Command Reference

519
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] rekey acl 3000
Related commands
• gdoi ks group
• source address
rekey authentication
Use rekey authentication to specify the key pair to be used by the KS during a rekey.
Use undo rekey authentication to remove the specified key pair.
Syntax
rekey authentication public-key rsa key-name
undo rekey authentication
Default
No key pair is specified for a rekey.
Views
GDOI KS group view
Default command level
2: System level
Parameters
public-key: Specifies the local key pair.
rsa: Specifies the public key algorithm as RSA.
key-name: Specifies the key pair name, a case-insensitive string of 1 to 64 characters.
Usage guidelines
The KS sends the public key of the key pair to GMs in rekey messages. The GMs use the public key to
authenticate the rekey messages from the KS.
Examples
# Specify the rekey key pair as mykey for the GDOI KS group abc.
<Sysname> system-view
[Sysname]gdoi ks group abc
[Sysname-gdoi-ks-group-abc] rekey authentication public-key rsa mykey
Related commands
gdoi ks group
rekey encryption
Use rekey encryption to specify the rekey encryption algorithm.
Use undo rekey encryption to restore the default.