R3102-R3103-HP 6600/HSR6600 Routers High Availability Configuration Guide

43
Setting the port shutdown mode
On detecting a unidirectional link, the ports can be shut down in one of the following two modes.
 Manual mode—This mode applies to low performance networks, where normal links might be
treated as unidirectional links. It protects data traffic transmission against false unidirectional
links. In this mode, DLDP only detects unidirectional links but does not automatically shut down
unidirectional link ports. Instead, the DLDP state machine generates log and traps to prompt you
to manually shut down unidirectional link ports with the shutdown command. HP recommends
that you do as prompted. Then the DLDP state machine transits to the Disable state.
 Auto mode—In this mode, when a unidirectional link is detected, DLDP transits to Disable state,
generates log and traps, and sets the port state to DLDP Down.
On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is auto
mode, the port will be shut down by DLDP when it receives a packet sent by itself. This will cause
remote OAM loopback to operate incorrectly. To prevent this, set the port shutdown mode to manual
mode.
If the device is busy, or the CPU usage is high, normal links might be treated as unidirectional links. In
this case, you can set the port shutdown mode to manual mode to alleviate the impact caused by false
unidirectional link report.
To set port shutdown mode:
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Set port shutdown
mode.
dldp unidirectional-shutdown { auto |
manual }
Optional.
auto by default.
Configuring DLDP authentication
You can guard your network against attacks and malicious probes by configuring an appropriate
DLDP authentication mode, which can be simple authentication or MD5 authentication. If your
network is safe, you can choose not to authenticate.
To enable DLDP to operate correctly, make sure that DLDP authentication modes and passwords on
both sides of a link are the same.
To configure DLDP authentication:
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Configure DLDP
authentication.
dldp authentication-mode { none |
{ md5 | simple } password }
none by default.