Configuring Rsvp Authentication - HP HPE FlexNetwork MSR Router Series Configuration Manual

Step
consecutive lost or
erroneous hellos.
4. Set the interval for sending
hello requests.
5. Return to system view.
6. Enter interface view.
7. Enable RSVP hello
extension.

Configuring RSVP authentication

RSVP adopts hop-by-hop authentication to prevent fake resource reservation requests from
occupying network resources. The interfaces at the two ends of a link must use the same
authentication key.
RSVP authentication can be configured in the following views:
•
RSVP view—Configuration applies to all RSVP security associations.
•
RSVP neighbor view—Configuration applies only to RSVP security associations with the
specified RSVP neighbor.
•
Interface view—Configuration applies only to RSVP security associations established on the
current interface.
Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of
priority.
To configure RSVP authentication in RSVP neighbor view:
Step
1. Enter system view.
2. Enter RSVP view.
3. Create an RSVP
authentication neighbor and
enter RSVP neighbor view.
4. Enable RSVP authentication
for the RSVP neighbor and
specify the authentication
key.
5. Enable challenge-response
handshake for the RSVP
neighbor.
6. Set the idle timeout for the
RSVP security associations
with the RSVP neighbor.
7. Set the maximum number of
out-of-sequence RSVP
authentication messages
that can be received from the
RSVP neighbor.
To configure RSVP authentication in interface view:
Command
hello interval interval
quit
interface interface-type
interface-number
rsvp hello enable
Command
system-view
rsvp
peer ip-address
authentication key { cipher |
plain } auth-key
authentication challenge
authentication lifetime life-time
authentication window-size
number
170
Remarks
is 4.
By default, hello requests are sent
every 5 seconds.
N/A
N/A
By default, RSVP hello extension
is disabled.
Remarks
N/A
N/A
By default, the device does not
have any RSVP authentication
neighbors.
By default, RSVP authentication
is disabled.
By default, the
challenge-response handshake
function is disabled.
By default, the idle timeout is 1800
seconds (30 minutes).
By default, only one RSVP
authenticated message can be
received out of sequence.