display keychain

Function

Using the display keychain command, you can view the configuration of the specified keychain.

Format

display keychain keychain-name

display keychain keychain-name key-id key-id

Parameters

Parameter	Description	Value
keychain-name	Specifies the name of the keychain to be displayed.	The value is a string of 1 to 47 case-insensitive characters, spaces not supported.
key-id key-id	Specifies the key-id of a particular keychain to be displayed.	The integer value ranges from 0 to 63.

Parameter

Description

Value

keychain-name

Specifies the name of the keychain to be displayed.

The value is a string of 1 to 47 case-insensitive characters, spaces not supported.

key-id key-id

Specifies the key-id of a particular keychain to be displayed.

The integer value ranges from 0 to 63.

Views

All views

Default Level

1: Monitoring level

Task Name and Operations

Task Name	Operations
key-chain	read

Usage Guidelines

Usage Scenario

To locate or rectify a keychain authentication failure, or collect required information before configuration, you can run the display keychain command to view configurations of a specified keychain.

Example

The actual command output varies according to the device. The command output here is only an example.

# Display keychain details using keychain name and key-id 1.

<HUAWEI> display keychain earth key-id 1
 Keychain Information:
 ----------------------
 Keychain Name             : earth
   Timer Mode              : Absolute
   Receive Tolerance(min)  : 0
   Digest Length           : 32
   Time Zone               : LMT
   TCP Kind                : 254
   TCP Algorithm IDs       :
     HMAC-MD5              : 5
     HMAC-SHA1-12          : 2
     HMAC-SHA1-20          : 6
     MD5                   : 3
     SHA1                  : 4
     HMAC-SHA-256          : 7
     SHA-256               : 8
     SM3                   : 9
     AES-128-CMAC          : 10

 Key ID Information:
 ----------------------
 Key ID                    : 1
   Key string              : ******
   Algorithm               : HMAC-SHA-256
   SEND TIMER              :
     Start time            : 2011-03-10 14:40
     End time              : 2011-03-10 14:50
     Status                : Inactive
   RECEIVE TIMER           :
     Start time            : 2011-03-10 14:40
     End time              : 2011-03-10 14:50
     Status                : Inactive
   DEFAULT SEND KEY ID INFORMATION
     Default               : Not configured

# Display details about a keychain named earth, without a key ID specified.

<HUAWEI> display keychain earth
 Keychain Information:
 ----------------------
 Keychain Name             : earth
   Timer Mode              : Absolute
   Receive Tolerance(min)  : 0
   Digest Length           : 32
   Time Zone               : LMT
   TCP Kind                : 254
   TCP Algorithm IDs       :
     HMAC-MD5              : 5
     HMAC-SHA1-12          : 2
     HMAC-SHA1-20          : 6
     MD5                   : 3
     SHA1                  : 4
     HMAC-SHA-256          : 7
     SHA-256               : 8
     SM3                   : 9
     AES-128-CMAC          : 10
 Number of Key IDs         : 0
 Active Send Key ID        : None
 Active Receive Key IDs    : None
 Default send Key ID       : Not configured

# Display details about a keychain named earth, with the key ID set to 1.

<HUAWEI> display keychain earth
 Keychain Information:
 ----------------------
 Keychain Name             : earth
   Timer Mode              : Absolute
   Receive Tolerance(min)  : 0
   Digest Length           : 32
   Time Zone               : LMT
   TCP Kind                : 254
   TCP Algorithm IDs       :
     HMAC-MD5              : 5
     HMAC-SHA1-12          : 2
     HMAC-SHA1-20          : 6
     MD5                   : 3
     SHA1                  : 4
     HMAC-SHA-256          : 7
     SHA-256               : 8
     SM3                   : 9
     AES-128-CMAC          : 10
 Number of Key IDs         : 1
 Active Send Key ID        : None
 Active Receive Key IDs    : None
 Default send Key ID       : Not configured

 Key ID Information:
 ----------------------
 Key ID                    : 1
   Key string              : ******
   Algorithm               : HMAC-SHA-256
   SEND TIMER              :
     Start time            : 2011-03-10 14:40
     End time              : 2011-03-10 14:50
     Status                : Inactive
   RECEIVE TIMER           :
     Start time            : 2011-03-10 14:40
     End time              : 2011-03-10 14:50
     Status                : Inactive

**Table 1** Description of the **display keychain** command output
Item	Description
Keychain Name	Specifies the configured Keychain name.
Timer Mode	Specifies the timing mode of the Keychain. absolute: specifies an absolute period in which the keychain takes effect. For example, from 12:30 2011-11-19 to 18:30 2011-11-19 the keychain is effective. Daily periodic: specifies the keychain takes effect on a daily basis. Weekly periodic: specifies the keychain tackes effect on a weekly basis. Monthly periodic: specifies the keychain tackes effect on a monthly basis. Yearly periodic: specifies the keychain tackes effect on a yearly basis.
Receive Tolerance	Specifies the receive tolerance configured for the Keychain.
TCP Kind	Specifies the configured TCP kind value for the Keychain.
TCP Algorithm IDs	Lists the TCP algorithm ID configured for the Keychain.
Algorithm	Specifies the algorithm type configured for the key-id.
Key ID	Specifies the unique key Identification number for a key present inside a keychain.
Key string	Specifies the key string configured for the key-id.
SEND TIMER	Specifies the send time configuration for the key-id.
Start time	Specifies the start time configuration for the key-id.
End time	Specifies the end time configuration for the key-id.
Status	Specifies the status of the send/receive key-id.
RECEIVE TIMER	Specifies the receive time configuration for the key-id.
DEFAULT SEND KEY ID INFORMATION	Specifies the default send-key-id information.
Default send Key ID	Specifies the default send key-id configured.
Default	Specifies the default send-key-id status.
Number of Key IDs	Specifies the number of key-id configured.
Active Send Key ID	Specifies the active send key-id.
Active Receive Key IDs	Specifies the active receive key-ids.