NGE encryption-keygroup configuration is supported on PW templates to enable the encryption of MPLS services that are based on BGP-VPLS and BGP-VPWS and that have auto-gre-sdp enabled on the PW template. All services configured using the PW template that have both NGE and auto-gre-sdp enabled are encrypted.
When changing the encryption-keygroup on a PW template, the change does not take effect immediately. The operator must execute the following command after each change to the encryption-keygroup for it to take effect:
tools>perform>service>eval-pw-template>allow-service-impact