Cisco NCS 5500 Series Configuration Manual page 102

BGP Prefix Origin Validation Based on RPKI
• transport tcp port port_number
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#transport ssh port 22
Or
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#transport tcp port 2
Specifies a transport method for the RPKI cache.
• ssh—Select ssh to connect to the RPKI cache using SSH.
• tcp—Select tcp to connect to the RPKI cache using TCP (unencrypted).
• port port_number—Specify a port number for the specified RPKI cache transport. For tcp, the range of supported
port number is 1 to 65535. For ssh, use port number 22.
• Do not specify a custom port number for RPKI cache transport over SSH. You must use port 22 for RPKI
Note
over SSH.
• You can set the transport to either TCP or SSH. Change of transport causes the cache session to flap.
Step 5 (Optional) username user_name
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#username ssh_rpki_cache
Specifies a (SSH) username for the RPKI cache-server.
Step 6 (Optional) password
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#password ssh_rpki_pass
Specifies a (SSH) password for the RPKI cache-server.
Note The "username" and "password" configurations only apply if the SSH method of transport is active.
Step 7 preference preference_value
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#preference 1
Specifies a preference value for the RPKI cache. Range for the preference value is 1 to 10. Setting a lower preference
value is better.
Step 8 purge-time time
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#purge-time 30
Configures the time BGP waits to keep routes from a cache after the cache session drops. Set purge time in seconds.
Range for the purge time is 30 to 360 seconds.
Step 9 Use one of these commands.
• refresh-time time
• refresh-time off
BGP Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.2.x
92
Implementing BGP