User guide

200 Chapter 5. Command Line Interface Reference
REMOTE SETENCRYPTION (RFC 1969 Encryption)
This command is used to specify a PPP DES (Data Encryption Standard) 56-bit key with fixed transmit and
receive keys.
REMOTE SETENCRYPTION (DifÞe-Hellman Encryption)
This command is used to specify encryption based on the Diffie-Hellman key-exchange protocol. Each router
possesses an internal encryption file that is associated with a public key providing 768-bit security. The predefined
keys can be replaced by the user. The configuration file on the router must have a ÒnumÓ suffix (e.g., dh96.num).
remote setEncryption DESE RX|TX <key> <remoteName>
RX Receive key
TX Transmit key
key Key in the format of an eight-hexadecimal number.
remoteName Name of the remote router (character string).
Example:
remote setEncryption dese tx 1111111111111111 HQ
remote setEncryption dese rx 2222222222222222 HQ
remote setEncryption DESE_1_KEY|DESE_2_KEY [<filename>] <remoteName>
DESE_1_KEY SpeciÞes that the same key is used in both directions
DESE_2_KEY SpeciÞes that the keys are different
Þlename Name of the Þle containing the DifÞe-Hellman values. If the Þle is not speciÞed, default values
built into the routerÕs kernel are automatically selected.
remoteName Name of the remote router (character string).
Example:
remote setEncryption DESE_1_KEY dh96.num HQ