default send-key-id

Function

Using the default send-key-id command, you can configure a particular key-id as the default send-key-id for that keychain.

Using the undo default send-key-id command, you can delete default send-key-id.

By default, no key-id is configured as default send-key-id.

Format

default send-key-id

undo default send-key-id

Parameters

None

Views

weekly Key-ID view, yearly Key-ID view, daily Key-ID view, monthly Key-ID view, absolute Key-ID view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
key-chain	write

Usage Guidelines

Usage Scenario

In keychain authentication mode, secure protocol packet transmission is provided by changing the authentication algorithm and key dynamically. This can reduce the workload of changing the algorithm and key manually. A keychain consists of multiple authentication key IDs, each of which is valid within different time periods. When a key ID becomes valid, the authentication algorithm corresponding to the key ID is used, and packets passing the authentication will be sent or received.

If a key ID for packet sending is not configured in a keychain or no key ID for packet sending is valid within a certain period, protocol packets cannot be authenticated and encrypted. As a result, protocol packet transmission fails. To address such a problem, configure a default key ID for packet sending. If no key ID is valid, the default key ID for packet sending is used.

Precautions

Each keychain can have only one default key ID for packet sending.

If the default key ID for packet sending is an existing key ID, the authentication and encryption algorithms, and key corresponding to the key ID are used.
If the default key ID for packet sending is a newly created key ID, configure the authentication and encryption algorithms, and key for the key ID.

Example

# Configure the send-key-id 1 as default in keychain huawei.

<HUAWEI> system-view
[~HUAWEI] keychain huawei mode absolute
[*HUAWEI-keychain-huawei] key-id 1
[*HUAWEI-keychain-huawei-keyid-1] default send-key-id