Configuring Rsvp Authentication On A Neighbor - Cisco NCS 5500 Series Configuration Manual

Configuring RSVP for MPLS-TE
RP/0/RP0/CPU0:router(config-rsvp-if-auth)# window-size 33
RP/0/RP0/CPU0:router(config)# commit
Verification
Verify the configuration of authentication parameters using the following command.
RP/0/RP0/CPU0:router# show rsvp authentication detail
RSVP Authentication Information:
Source Address:
Destination Address:
Neighbour Address:
Interface:
Direction:
LifeTime:
LifeTime left:
KeyType:
Key Source:
Key Status:
KeyID:
Digest:
window-size:
Challenge:
TX Sequence:
Messages successfully authenticated:
Messages failed authentication:
Related Topics
• Configuring RSVP Message Authentication Globally, on page 28
• Configuring RSVP Authentication on a Neighbor, on page 30
• RSVP for MPLS-TE Features- Details, on page 34

Configuring RSVP Authentication on a Neighbor

You can individually configure the values of RSVP authentication parameters including key-chain, life time,
and window size on a neighbor.
Configuration Example
This example configures the authentication key-chain, life time for the security association, and window size
on a RSVP neighbor. A valid key-chain should be already configured to use it as part of this task.
RP/0/RP0/CPU0:router# configure
RP/0/RP0/CPU0:router(config)# rsvp neighbor 1.1.1.1 authentication
RP/0/RP0/CPU0:router(config-rsvp-if-auth)# key-source key-chain mpls-keys
RP/0/RP0/CPU0:router(config-rsvp-if-auth)# life-time 2000
RP/0/RP0/CPU0:router(config-rsvp-if-auth)# window-size 33
RP/0/RP0/CPU0:router(config)# commit
Verification
Verify the configuration of authentication parameters using the following command.
RP/0/RP0/CPU0:router# show rsvp authentication detail
RSVP Authentication Information:
Neighbour Address:
Interface:
Direction:
LifeTime:
LifeTime left:
MPLS Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.2.x
30
3.0.0.1
3.0.0.2
3.0.0.2
HundredGigabitEthernet 0/0/0/3
Send
2000 (sec)
1305 (sec)
Static Global KeyChain
mpls-keys
No error
1
HMAC MD5 (16)
33
Not supported
5023969459702858020 (0x45b8b99b00000124)
245
0
1.1.1.1
HundredGigabitEthernet 0/0/0/3
Send
2000 (sec)
1205 (sec)
Implementing RSVP for MPLS-TE