R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

ix
MSDP configuration ················································································································································ 483
MSDP configuration task list ······································································································································· 483
Configuring basic functions of MSDP ························································································································ 484
Configuration prerequisites ································································································································ 484
Enabling MSDP ···················································································································································· 484
Creating an MSDP peer connection ·················································································································· 484
Configuring a static RPF peer ···························································································································· 485
Configuring an MSDP peer connection ····················································································································· 485
Configuration prerequisites ································································································································ 485
Configuring MSDP peer description·················································································································· 485
Configuring an MSDP mesh group ··················································································································· 486
Configuring MSDP peer connection control ····································································································· 486
Configuring SA messages related parameters ········································································································· 487
Configuration prerequisites ································································································································ 487
Configuring SA message content ······················································································································ 487
Configuring SA request messages ····················································································································· 488
Configuring SA message filtering rules ············································································································· 488
Configuring the SA cache mechanism ·············································································································· 489
Displaying and maintaining MSDP ···························································································································· 490
MSDP configuration examples ···································································································································· 490
Inter-AS multicast configuration leveraging BGP routes ·················································································· 490
Inter-AS multicast configuration leveraging static RPF peers ··········································································· 496
Anycast RP configuration ···································································································································· 499
SA message filtering configuration ···················································································································· 503
Troubleshooting MSDP ················································································································································ 507
MSDP peers stay in down state ························································································································· 507
No SA entries in the router’s SA cache ············································································································ 507
Inter-RP communication faults in anycast RP application ················································································· 508
SSL configuration ···················································································································································· 509
SSL overview ································································································································································· 509
SSL security mechanism ······································································································································ 509
SSL protocol stack ··············································································································································· 510
SSL configuration task list ············································································································································ 510
Configuring an SSL server policy ······························································································································· 510
Configuration prerequisites ································································································································ 510
Configuration procedure ···································································································································· 511
SSL server policy configuration example ·········································································································· 511
Configuring an SSL client policy ································································································································ 513
Configuration prerequisites ································································································································ 513
Configuration procedure ···································································································································· 513
Displaying and maintaining SSL ································································································································· 514
Troubleshooting SSL ····················································································································································· 514
Support and other resources ·································································································································· 515
Contacting HP ······························································································································································ 515
Subscription service ············································································································································ 515
Related information ······················································································································································ 515
Documents ···························································································································································· 515
Websites ······························································································································································· 515
Conventions ·································································································································································· 516
Index ········································································································································································ 518