6.8. CIPE Key Management
As previously mentioned, CIPE incorporates a secure combination of
static link keys and encrypted traffic to create
a secure tunnel over carrier networks such as the Internet. The use of
static link keys provide a common point of reference for two
CIPE-enabled networks to pass information securely. Therefore, it is
imperative that both CIPE-enabled network gateways share the
exact same key, or CIPE communication will not be
possible.
6.8.1. Generating CIPE Keys
Generating CIPE keys requires knowledge of what kind of keys are
compatible. Random alphanumeric generators do not work. Static keys
must be 128-bit, 32-character strings. These can be created by piping
an arbitrary file or outputted process through the
md5sum command. For example:
Place this key in the /etc/cipe/options.cipcb0
file for all CIPE servers and clients.
