Avaya Configuring Data Encryption Services User Manual download pdf (Page 39)

Enabling Encryption

117386-A Rev. A 3-11

Changing an NPK in the MIB

To change the MIB NPK value:

1. At any shell prompt on a UNIX platform, or at the DOS prompt on a PC,

enter

ksession

You enter the secure shell, which prompts you for the password.

2. Enter the password.

The prompt changes to SSHELL.

3. Enter

ktranslate

<old_NPK_value>

The MIB now has the same NPK as the router.

4. Save the conﬁguration ﬁle.

Changing LTSSs

You should change LTSSs periodically as well. To change LTSSs, create new ones

using the WEP Key Manager tool as described in the previous sections.

Creating TEKs

The router stores its TEK seed in nonvolatile RAM. WEP uses and manages the

TEK to encrypt data. Your only task is to create a seed for the RNG that generates

TEKs.

These instructions assume that you have connected a PC or UNIX computer

directly to the console port of the router. For instructions on connecting a

computer to the router console port, refer to the installation manual that came with

your router.

1 2 ... 34 35 36 37 38 39 40 41 42 43 44 ... 61 62

No comments

Avaya Configuring Data Encryption Services User Manual Page 39