Specifying The Keychain For Rsvp Neighbor Authentication - Cisco ASR 9000 Series Configuration Manual

Implementing RSVP for MPLS-TE

Specifying the Keychain for RSVP Neighbor Authentication

Perform this task to specify the keychain RSVP neighbor authentication.
You must configure a keychain first (see Cisco ASR 9000 Series Aggregation Services Router System Security
Configuration Guide).
SUMMARY STEPS
1. configure
2. rsvp neighbor IP-address authentication
3. key-source key-chain key-chain-name
4. Use the commit or end command.
DETAILED STEPS
Command or Action
Step 1
configure
Example:
RP/0/RSP0/CPU0:router# configure
Step 2 rsvp neighbor IP-address authentication
Example:
RP/0/RSP0/CPU0:router(config)# rsvp neighbor
1.1.1.1 authentication
RP/0/RSP0/CPU0:router(config-rsvp-nbor-auth)#
Step 3 key-source key-chain key-chain-name
Example:
RP/0/RSP0/CPU0:router(config-rsvp-nbor-auth)#
key-source key-chain mpls-keys
Step 4 Use the commit or end command.
OL-28381-02
Purpose
Enters global configuration mode.
Enters neighbor authentication configuration mode. Use the rsvp
neighbor command to activate RSVP cryptographic authentication
for a neighbor.
IP address
authentication
Specifies the source of the key information to authenticate RSVP
signaling messages.
key-chain-name
commit—Saves the configuration changes and remains within the
configuration session.
end—Prompts user to take one of these actions:
• Yes— Saves configuration changes and exits the configuration
Cisco ASR 9000 Series Aggregation Services Router MPLS Configuration Guide, Release 4.3.x
Configuring RSVP Neighbor Authentication
IP address of the neighbor. A single IP address for a specific
neighbor; usually one of the neighbor's physical or logical
(loopback) interfaces.
Configures the RSVP authentication parameters.
Name of the keychain. The maximum number of characters
is 32.
session.
93