Administrator Guide

Version Description
9.1.(0.0) Introduced on S4810 and Z9000.
8.4.2.0 Introduced on the E-Series.
8.3.19.0 Introduced on the S4820T.
Usage Information
Before you enable IPsec authentication on an OSPFv3 interface, rst enable IPv6 unicast routing globally, congure
an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router. Congure
the same authentication policy (same SPI and key) on each OSPFv3 interface in a link.
To remove an IPsec authentication policy from an interface, enter the no ipv6 ospf authentication spi number
command. To remove null authentication on an interface to allow the interface to inherit the authentication policy
congured for the OSPFv3 area, enter the no ipv6 ospf authentication null command.
Related Commands
• area authentication – congure an IPsec authentication policy for an OSPFv3 area.
• show crypto ipsec policy – display the conguration of IPsec authentication policies.
• show crypto ipsec sa ipv6 – display the security associations set up for OSPFv3 interfaces in authentication
policies.
ipv6 ospf bfd all-neighbors
Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters.
Syntax
ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx
multiplier value role {active | passive}]]
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd all-neighbors
disable command in interface mode..
Parameters
disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface.
interval milliseconds (OPTIONAL) Enter the keyword interval to specify non-default BFD session
parameters beginning with the transmission interval. The range is from 50 to 1000. The
default is 200.
min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system
receives control packets from the remote system. The range is from 50 to 1000. The
default is 200.
multiplier value Enter the keyword multiplier to specify the number of packets that must be missed
in order to declare a session down. The range is from 3 to 50. The default is 3.
role [active |
passive]
Enter the role that the local system assumes:
• Active — active system initiates the BFD session. Both systems can be active for
the same session.
• Passive — passive system does not initiate a session. It only responds to a request
for session initialization from the active system.
Open Shortest Path First (OSPFv2 and OSPFv3) 1153