Configure Rpki Prefix Validation - Cisco NCS 5500 Series Configuration Manual

Implementing BGP
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#refresh-time 20
Or
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#refresh-time off
Configures the time BGP waits in between sending periodic serial queries to the cache. Set refresh-time in seconds.
Range for the refresh time is 15 to 3600 seconds.
Configure the off option to specify not to send serial-queries periodically.
Step 10
Use one these commands.
• response-time time
• response-time off
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#response-time 30
Or
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#response-time off
Configures the time BGP waits for a response after sending a serial or reset query. Set response-time in seconds. Range
for the response time is 15 to 3600 seconds.
Configure the off option to wait indefinitely for a response.
Step 11
shutdown
Example:
RP/0/RP0/CPU0:router(config-bgp-rpki-server)#shutdown
Configures shut down of the RPKI cache.
Step 12
commit

Configure RPKI Prefix Validation

Perform this task to control the behavior of RPKI prefix validation processing.
SUMMARY STEPS
1. configure
2. router bgp as-number
3. Use one of these commands.
4. origin-as validity signal ibgp
5. commit
• rpki origin-as validation disable
• rpki origin-as validation time {off | prefix_validation_time
BGP Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.2.x
BGP Prefix Origin Validation Based on RPKI
93