Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR Software?
Which CLI mode must be used to configure the BGP keychain in Cisco IOS XR Software?
To configure a BGP keychain in Cisco IOS XR Software, the specific mode required is the BGP neighbor configuration mode. This allows you to directly associate the keychain with a BGP neighbor by specifying the keychain name, which is essential for secure neighbor relationships and authentication.
I'd say it's C as in B you only _enable that keychain to be used there for that neighbor_, but you have to actually _configure_ it in the global..
I have to disagree ;) - One thing is "enabling" and other thing is "configuring" (The actual keychain setting)
Correct answer is B, BGP keychain is configured under nbr config modes https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#task_81A7295F447946F880AB22C5D647CFF8
https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs_r3-9/routing/command/reference/rr39crs1book_chapter1.html#wp1800220457 RP/0/RP0/CPU0:router(config)# router bgp 140 RP/0/RP0/CPU0:router(config-bgp)# neighbor 172.20.1.1 RP/0/RP0/CPU0:router(config-bgp-nbr)# remote-as 1 RP/0/RP0/CPU0:router(config-bgp-nbr)# keychain keychain_A
I would say the answer is B. In the global configuration mode you can create a keychain, which can be used for BGP but also for ISIS or OSPF. The question is asking specifically for a BGP keychain which can be configured under the BGP neighbor configuration mode. For this reason I would say B is a more specific answer
It is: B. SUMMARY STEPS configure router bgp [as-number] neighbor [ip-address] remote-as [as-number] keychain [name] Use the [commit] or [end] command. So, "Keychain Configuration" actually takes place from here: key chain <keychain_name> key <key_id> accept-lifetime <start-time> <end-time> key-string <master-key> send-lifetime <start-time> <end-time> cryptographic-algorithm <algorithm> ! https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#id_77358
B because they are asking for BGP ...
Key chain is a General mode configuration applicable for other services, in the BGP mode we're enabling the keychain, which was preconfigured before
I guess answer is "c": https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs-r6-4/system-security/configuration/guide/b-system-security-cg-crs-64x/b-system-security-cg-crs-64x_chapter_0100.pdf
Answer is C https://www.cisco.com/c/en/us/td/docs/routers/xr12000/software/xr12k_r3-9/security/configuration/guide/sc39kcm.html#wp1074457 https://www.cisco.com/c/en/us/td/docs/routers/crs/software/crs-r6-2/system-security/command/reference/b-system-security-cr-62x-crs/m-keychain-management-commands-asr9k-ncs6k-crs.html#wp2210940733
B according to Cisco XR guide below: configure router bgp as-number neighbor ip-address remote-as as-number keychain name https://www.cisco.com/c/en/us/td/docs/iosxr/ncs5500/bgp/63x/b-bgp-cg-ncs5500-63x/b-bgp-cg-ncs5500-63x_chapter_010.html#:~:text=override%20inherited%20values.-,SUMMARY%20STEPS,-configure
C is correct. It is the keychain, not bop password.