Configuring Sa Message-Related Parameters - HP FlexNetwork 7500 Series Configuration Manual

them. No attempt is made to re-establish the connection. The configuration information for the peer
remains unchanged.
MSDP peers periodically send keepalive messages to each other to keep a session alive. When a
session is established, an MSDP peer sends a keepalive message to its peer and starts a keepalive
timer and a peer hold timer. When the keepalive timer expires, the MSDP peer sends a new
keepalive message. If the MSDP peer receives an MSDP message from its peer before the peer
hold timer expires, it resets the peer hold timer. Otherwise, the MSDP peer tears down the session.
A TCP connection is required when one of the following conditions exists:
•
A new MSDP peer is created.
•
A previously deactivated MSDP peering connection is reactivated.
•
A previously failed MSDP peer attempts to resume operation.
You can change the MSDP connection retry interval to adjust the interval between MSDP peering
connection attempts.
To enhance MSDP security, enable MD5 authentication for both MSDP peers to establish a TCP
connection. If the MD5 authentication fails, the TCP connection cannot be established.
IMPORTANT:
The MSDP peers involved in MD5 authentication must be configured with the same authentication
method and key. Otherwise, the authentication fails and the TCP connection cannot be established.
To control MSDP peering connections:
Step
Enter system view.
1.
Enter MSDP view.
2.
Tear down an MSDP peering
3.
connection.
Configure the MSDP
4.
connection retry interval.
Configure MD5
5.
authentication for both
MSDP peers to establish a
TCP connection.

Configuring SA message-related parameters

This section describes how to configure SA message-related parameters.
Configuration prerequisites
Before you configure SA message delivery, complete the following tasks:
•
Configure a unicast routing protocol so that all devices in the domain can interoperate at the
network layer.
•
Configure basic MSDP features.
Command
system-view
msdp [ vpn-instance
vpn-instance-name ]
shutdown peer-address
timer retry interval
peer peer-address password
{ cipher | simple } password
158
Remarks
N/A
N/A
By default, an MSDP peering
connection is active.
The default setting is 30 seconds.
By default, MD5 authentication is
not performed before a TCP
connection is established.