H3C S6550X-HI Series Command Reference Manual page 2009

Default
No authentication is performed for an OSPFv3 interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
: Specifies keychain authentication.
keychain
keychain-name
instance instance-id
Usage guidelines
When keychain authentication is configured for an OSPFv3 interface, OSPFv3 performs the
following operations before sending a packet:
1. Obtains a valid send key from the keychain.
OSPFv3 does not send the packet if it fails to obtain a valid send key.
2. Uses the key ID, authentication algorithm, and key string to authenticate the packet.
If the key ID is greater than 65535, OSPFv3 does not send the packet.
When keychain authentication is configured for an OSPFv3 interface, OSPFv3 performs the
following operations after receiving a packet:
1. Uses the key ID carried in the packet to obtain a valid accept key from the keychain.
OSPFv3 discards the packet if it fails to obtain a valid accept key.
2. Uses the authentication algorithm and key string for the valid accept key to authenticate the
packet.
If the authentication fails, OSPFv3 discards the packet.
OSPFv3 supports only the HMAC-SHA-256 authentication algorithm.
The ID of keys used for authentication can only be in the range of 0 to 65535.
Examples
# Configure VLAN-interface 11 to use the keychain test for OSPFv3 packet authentication.
<Sysname> system-view
[Sysname] interface vlan-interface 11
[Sysname-Vlan-interface11] ospfv3 authentication-mode keychain test
ospfv3 bfd enable
Use ospfv3 bfd enable
Use
undo ospfv3 bfd enable
Syntax
ospfv3 bfd enable [ instance instance-id ]
undo ospfv3 bfd enable [ instance instance-id ]
Default
BFD is disabled on an OSPFv3 interface.
: Specifies a keychain by its name, a case-sensitive string of 1 to 63 characters.
: Specifies an instance by its ID in the range of 0 to 255. The default is 0.
to enable BFD on an OSPFv3 interface.
to disable BFD on an OSPFv3 interface.
75