You have been asked to add a key to an existing keychain. You issue the following commands to enter keychain key configuration mode:
RouterA(config)#key chain chain1
RouterA(configkeychain)#key 2
RouterA(configkeychainkey)#keystring key2
The new key should be valid for three hours, and the router should begin sending the key at 9 a.m. on January
13, 2015.
Which of the following commands should you issue next to achieve your goal? (Select the best answer.)
A.
accep-tlifetime 09:00:00 Jan 13 2015 duration 3
B.
accep-tlifetime 09:00:00 Jan 13 2015 duration 180
C.
send-lifetime 09:00:00 Jan 13 2015 duration 180
D.
send-lifetime 09:00:00 Jan 13 2015 duration 10800
Explanation:
You should issue the send-lifetime 09:00:00 Jan 13 2015 duration 10800 command to specify that the key in
this scenario should be valid for three hours and that the router should begin sending the key at 9 a.m. on
January 13, 2015. The send-lifetime command is used to specify the period of time during which a key should
be sent by a router for authentication. The syntax for this command is send-lifetime starttime {infinite | endtime |
duration seconds}, where starttime specifies the date and time that the key should start being sent. By default,
keys are valid indefinitely? however, you can use the durationkeyword to specify a duration value between 1
and 2,147,483,646 seconds. In this scenario, the duration is 10800 seconds, which is three hours, and the start
time is 09:00:00 Jan 13 2015, which corresponds to 9 a.m. on January 13, 2015.
You should not issue the sendlifetime 09:00:00 Jan 13 2015 duration 180command, because the key duration
is incorrectly specified as 180 seconds, which is three minutes, instead of 10,800 seconds, or three hours.
You should not issue the accept-lifetime 09:00:00 Jan 13 2015 duration 3 command or the accept-lifetime
09:00:00 Jan 13 2015 duration 180 command. The accept-lifetime command specifies the time period during
which a received key is considered valid. By default, received keys are valid indefinitely. If no send-lifetime
command has been issued, the accept-lifetime command will limit the period of time in which the received key
is valid, but it will have no effect on the period of time during which the router sends the key for authentication.Cisco: IP Routing ProtocolIndependent Commands: send-lifetime