Huawei NetEngine80E Configuration Manual - Reliability page 55

Hide thumbs Also See for NetEngine80E:

Table of Contents

HUAWEI NetEngine80E/40E Router

Configuration Guide - Reliability

PGP authentication string

PGP is a Layer 3 Huawei proprietary protocol and operates over a UDP connection. PGP's default

authentication mode is none. Messages transmitted in none authentication mode can be easily

used to initiate attacks. To protect the NE80E/40E running PGP, an authentication string can be

configured so that PGP messages are authenticated in simple text mode. Two E-APS-enabled

routers use the authentication string to authenticate PGP messages. Negotiation can be

successfully performed only when the two routers use the same authentication string.

Authentication string inconsistency will lead to a negotiation failure.

Interfaces in an APS Group Joining a Trunk Interface

Association Between an E-APS Group and PW Redundancy

An E-APS group is used to provide link reliability on the AC side and pseudo wire (PW)

redundancy is used to provide link reliability on the public network side. The primary and

secondary PWs on the public network can be associated with the E-APS-enabled interfaces on

the AC side. The association allows E-APS switching to trigger a primary/secondary PW

switchover, improving network reliability.

Figure 3-2 Association between an E-APS group and PW redundancy

PW is established to forward traffic between the two E-APS-enabled routers. For information

about how to configure a bypass PW, see the chapter "PW Redundancy Configuration" in the

HUAWEI NetEngine80E/40E Router Configuration Guide - VPN. An E-APS group is

associated with a PW in different ways in the following three scenarios:

Issue 02 (2014-09-30)

ATM-Trunk-based APS

Asynchronous Transfer Mode (ATM)-enabled working and protection interfaces can join

an ATM-Trunk interface on the NE80E/40E. Services are configured on ATM-Trunk sub-

CPOS-Trunk-based APS

Channelized Packet Over SDH/SONET (CPOS)-enabled working and protection interfaces

can join a single CPOS-Trunk interface on the NE80E/40E. Timeslots of an E1 channel of

a CPOS-Trunk interface can be bound together to create a trunk-serial interface. The trunk-

serial interface is added to a global Multilink Point to Point Protocol (MP) group, increasing

link bandwidth.

shows a network where an E-APS group is associated with PW redundancy. A bypass

Huawei Proprietary and Confidential

3 APS Configuration

Netengine40e