Configuring Rsvp Authentication - HP FlexNetwork HSR6600 Configuration Manual

Step
3. Set the maximum number of
consecutive lost or
erroneous hellos.
4. Set the interval for sending
hello requests.
5. Return to system view.
6. Enter interface view.
7. Enable RSVP hello
extension.

Configuring RSVP authentication

RSVP adopts hop-by-hop authentication to prevent fake resource reservation requests from
occupying network resources. The interfaces at the two ends of a link must use the same
authentication key.
RSVP authentication can be configured in the following views:
•
RSVP view—Configuration applies to all RSVP security associations.
•
RSVP neighbor view—Configuration applies only to RSVP security associations with the
specified RSVP neighbor.
•
Interface view—Configuration applies only to RSVP security associations established on the
current interface.
Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of
priority.
To configure RSVP authentication in RSVP neighbor view:
Step
1. Enter system view.
2. Enter RSVP view.
3. Create an RSVP
authentication neighbor and
enter RSVP neighbor view.
4. Enable RSVP authentication
for the RSVP neighbor and
specify the authentication
key.
5. Enable challenge-response
handshake for the RSVP
neighbor.
6. Set the idle timeout for the
RSVP security associations
with the RSVP neighbor.
7. Set the maximum number of
out-of-sequence RSVP
authentication messages
that can be received from the
RSVP neighbor.
Command
hello lost times
hello interval interval
quit
interface interface-type
interface-number
rsvp hello enable
Command
system-view
rsvp
peer ip-address
authentication key { cipher |
plain } string
authentication challenge
authentication lifetime life-time
authentication window-size
number
176
Remarks
By default, the maximum number
is 4.
By default, hello requests are sent
every 5 seconds.
N/A
N/A
By default, RSVP hello extension
is disabled.
Remarks
N/A
N/A
By default, no RSVP
authentication neighbors exist.
By default, RSVP authentication
is disabled.
By default, the
challenge-response handshake
feature is disabled.
By default, the idle timeout is 1800
seconds (30 minutes).
By default, only one RSVP
authenticated message can be
received out of sequence.