From: Alexei Monastyrnyi (alexeim@orcsoftware.com)
Date: Sat Nov 11 2006 - 15:25:40 ART
oops... please disregard this, I messed that with EIGRP etc :-)
Alexei Monastyrnyi wrote:
> I think first time should be in sync, then you can give a bit of a gap
> in accept life time during rotation on both sides.
>
> key 1
> send ZZZ 1993 to time X day Y 2006
> accept ZZZ 1993 to time X+15 min day Y 2006
>
> key 2
> send time X day Y 2006 to infinity
> accept time X-15 min day Y 2006 to infinity
>
> HTH
> A
>
> Ming Ki Au wrote:
>> Dear all,
>>
>> Can anyone tell me what is the best practice to do a key rotation with
>> minimum impact when I configure area authentication within OSPF?
>>
>> _______________________________________________________________________
>> Subscription information may be found at:
>> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:46 ART