Skip to main content
A newer release of this product is available.

security key-manager external boot-interfaces modify

Contributors
Suggest changes
PDFs

Modify external key manager logical interfaces

Availability: This command is available to cluster administrators at the advanced privilege level.

Description

This command enables cluster administrators to modify the IP address and route information that the external key manager uses at boot time to restore keys from external key servers.

Parameters

-node {<nodename>|local} - Node (privilege: advanced)

Use this parameter to modify information on the node that you specify.

-address-type {ipv4|ipv6|ipv6z} - Address Type (privilege: advanced)

Use this parameter to modify information for the address-type that you specify.

[-address <IP Address>] - Local Interface Address (privilege: advanced)

Use this parameter to modify the IP address that the system will use at boot time to restore keys from external key servers. This parameter implies -override-default true .

{ [-netmask <IP Address>] - Network Mask (privilege: advanced)

Use this parameter to modify the IP netmask that the system will use at boot time to restore keys from external key servers. This parameter can be used only with address-type ipv4. This parameter implies -override-default true .

| [-netmask-length <integer>] - Bits in Network Mask (privilege: advanced) }

Use this parameter to modify the IP netmask length that the system will use at boot time to restore keys from external key servers. This parameter implies -override-default true .

[-gateway <IP Address>] - Gateway (privilege: advanced)

Use this parameter to modify the IP gateway that the system will use at boot time to restore keys from external key servers. This parameter implies -override-default true .

[-port {<netport>|<ifgrp>}] - Network Port (privilege: advanced)

Use this parameter to modify the port that the system will use at boot time to restore keys from external key servers. The value that you specify cannot be a vlan or ifgrp port. This parameter implies -override-default true .

[-override-default {true|false}] - Override Default Setting? (privilege: advanced)

Use this parameter to modify the system's selection of boot time IP address and route information. When this value is false , the system will use the information associated with a node management LIF. When this value is true , then the administrator has chosen to override the defaults.

Examples

The following shows how to modify the port used by node "node2" at boot time to restore keys from external IPv4 key servers. In the example, IPv6 is not enabled in the cluster, so the -address-type parameter defaults to ipv4.

cluster-1::*> security key-manager external boot-interfaces modify -node node2 -port e0d

The following example shows how to modify the IP address and gateway parameters used by node "node1" at boot time to restore keys from external IPv6 key servers.

cluster-1::*> security key-manager external boot-interfaces modify -node node1 -address-type ipv6 -address fd20:8b1e:b255:814e:749e:11a3:3bff:5820 -gateway fd20:8b1e:b255:814e::1