Changing the key group for an SDP, VPRN service, or PW template

Changing key groups for an SDP, VPRN service, or PW template must be performed on all nodes for the service.

The following CLI syntax changes the key group on an SDP. The syntax for a VPRN service or PW template is similar.

Note: For PW template changes, the following tools command must be executed after the encryption-keygroup changes are made:

tools>perform>service>eval-pw-template>allow-service-impact

In the example below, the inbound and outbound key groups are changed from key group 4 to key group 6.

config>service# sdp sdp-id 
        — no encryption-keygroup direction {inbound|outbound}

config>service# sdp 61
    config>service>sdp# no encryption-keygroup direction inbound
    config>service>sdp# encryption-keygroup 6 direction outbound
    config>service>sdp# encryption-keygroup 6 direction inbound

The following example shows that the key group configuration has been changed for the SDP or the VPRN service.

domain1>config>service# info 
----------------------------------------------
...
        sdp 61 create
            shutdown
            far-end 10.10.10.10
            exit
            encryption-keygroup 6 direction inbound
            encryption-keygroup 6 direction outbound
        exit
...
----------------------------------------------
domain1>config>service# info