Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


key-chain (Authentication Keychain)


Hierarchy Level


Create the key-chain configuration for the Border Gateway Protocol (BGP) and the Label Distribution Protocol (LDP) routing protocols, the Bidirectional Forwarding Detection (BFD) protocol, and the Intermediate System-to-Intermediate System (IS-IS) protocol.



Authentication keychain name. It can be up to 126 characters. Characters can include any ASCII strings. If you include spaces, enclose all characters in quotation marks (“ ”).

description text-string

Configure the description for this authentication keychain. Put the text string in quotes (“text description”).

tolerance seconds

Configure the clock-skew tolerance in seconds for accepting keys for this authentication keychain.

  • Range: 0 through 4294967295 seconds

  • Default: 3600 seconds

The remaining statements are explained separately. Search for a statement in CLI Explorer or click a linked statement in the Syntax section for details.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 7.6.

Support for the BFD protocol introduced in Junos OS Release 9.6.

Support for the BFD protocol introduced in Junos OS Release 9.6 for EX Series switches.

Support for IS-IS introduced in Junos OS Release 11.2.