Verifying the configuration

  1. When the system time is within the lifetime from 10:00:00 to 11:00:00 on the day 2015/02/06, verify the status of the keys in keychain abc.

    # Display keychain information on Switch A. The output shows that key 1 is the valid key.

    [SwitchA] display keychain 
    
     Keychain name          : abc
       Mode                 : absolute
       Accept tolerance     : 0
       TCP kind value       : 254
       TCP algorithm value
         HMAC-MD5           : 5
         MD5                : 3
       Default send key ID  : None
       Active send key ID   : 1
       Active accept key IDs: 1
    
       Key ID               : 1
         Key string         : $c$3$dYTC8QeOKJkwFwP2k/rWL+1p6uMTw3MqNg==
         Algorithm          : md5
         Send lifetime      : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Send status        : Active
         Accept lifetime    : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Accept status      : Active
    
       Key ID               : 2
         Key string         : $c$3$7TSPbUxoP1ytOqkdcJ3K3x0BnXEWl4mOEw==
         Algorithm          : hmac-md5
         Send lifetime      : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Send status        : Inactive
         Accept lifetime    : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Accept status      : Inactive
    

    # Display keychain information on Switch B. The output shows that key 1 is the valid key.

    [SwitchB]display keychain
    
     Keychain name          : abc
       Mode                 : absolute
       Accept tolerance     : 0
       TCP kind value       : 254
       TCP algorithm value
         HMAC-MD5           : 5
         MD5                : 3
       Default send key ID  : None
       Active send key ID   : 1
       Active accept key IDs: 1
    
       Key ID               : 1
         Key string         : $c$3$/G/Shnh6heXWprlSQy/XDmftHa2JZJBSgg==
         Algorithm          : md5
         Send lifetime      : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Send status        : Active
         Accept lifetime    : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Accept status      : Active
    
       Key ID               : 2
         Key string         : $c$3$t4qHAw1hpZYN0JKIEpXPcMFMVT81u0hiOw==
         Algorithm          : hmac-md5
         Send lifetime      : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Send status        : Inactive
         Accept lifetime    : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Accept status      : Inactive
    
  2. When the system time is within the lifetime from 11:00:00 to 12:00:00 on the day 2015/02/06, verify the status of the keys in keychain abc.

    # Display keychain information on Switch A. The output shows that key 2 becomes the valid key.

    [SwitchA]display keychain
    
     Keychain name          : abc
       Mode                 : absolute
       Accept tolerance     : 0
       TCP kind value       : 254
       TCP algorithm value
         HMAC-MD5           : 5
         MD5                : 3
       Default send key ID  : None
       Active send key ID   : 2
       Active accept key IDs: 2
    
       Key ID               : 1
         Key string         : $c$3$dYTC8QeOKJkwFwP2k/rWL+1p6uMTw3MqNg==
         Algorithm          : md5
         Send lifetime      : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Send status        : Inactive
         Accept lifetime    : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Accept status      : Inactive
    
       Key ID               : 2
         Key string         : $c$3$7TSPbUxoP1ytOqkdcJ3K3x0BnXEWl4mOEw==
         Algorithm          : hmac-md5
         Send lifetime      : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Send status        : Active
         Accept lifetime    : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Accept status      : Active
    

    # Display keychain information on Switch B. The output shows that key 2 becomes the valid key.

    [SwitchB]display keychain 
    
     Keychain name          : abc
       Mode                 : absolute
       Accept tolerance     : 0
       TCP kind value       : 254
       TCP algorithm value
         HMAC-MD5           : 5
         MD5                : 3
       Default send key ID  : None
       Active send key ID   : 1
       Active accept key IDs: 1
    
       Key ID               : 1
         Key string         : $c$3$/G/Shnh6heXWprlSQy/XDmftHa2JZJBSgg==
         Algorithm          : md5
         Send lifetime      : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Send status        : Inactive
         Accept lifetime    : 10:00:00 2015/02/06 to 11:00:00 2015/02/06
         Accept status      : Inactive
    
       Key ID               : 2
         Key string         : $c$3$t4qHAw1hpZYN0JKIEpXPcMFMVT81u0hiOw==
         Algorithm          : hmac-md5
         Send lifetime      : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Send status        : Active
         Accept lifetime    : 11:00:00 2015/02/06 to 12:00:00 2015/02/06
         Accept status      : Active