R3303-HP HSR6800 Routers High Availability Configuration Guide

42
Setting the port shutdown mode
On detecting a unidirectional link, the ports can be shut down in one of the following two modes.
• Manual mode—This mode applies to low performance networks, where normal links might be
treated as unidirectional links. It protects data traffic transmission against false unidirectional links.
In this mode, DLDP only detects unidirectional links but does not automatically shut down
unidirectional link ports. Instead, the DLDP state machine generates log and traps to prompt you to
manually shut down unidirectional link ports with the shutdown command. HP recommends that
you do as prompted. Then the DLDP state machine transits to the Disable state.
• Auto mode—In this mode, when a unidirectional link is detected, DLDP transits to Disable state,
generates log and traps, and sets the port state to DLDP Down.
On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is auto mode,
the port will be shut down by DLDP when it receives a packet sent by itself. This will cause remote OAM
loopback to operate incorrectly. To prevent this, set the port shutdown mode to manual mode.
If the device is busy, or the CPU usage is high, normal links might be treated as unidirectional links. In this
case, you can set the port shutdown mode to manual mode to alleviate the impact caused by false
unidirectional link report.
To set port shutdown mode:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Set port shutdown
mode.
dldp unidirectional-shutdown { auto |
manual }
Optional.
auto by default.
Configuring DLDP authentication
You can guard your network against attacks and malicious probes by configuring an appropriate DLDP
authentication mode, which can be simple authentication or MD5 authentication. If your network is safe,
you can choose not to authenticate.
To enable DLDP to operate correctly, make sure that DLDP authentication modes and passwords on both
sides of a link are the same.
To configure DLDP authentication:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Configure DLDP
authentication.
dldp authentication-mode { none |
{ md5 | simple } password }
none by default.
Resetting DLDP state
After DLDP detects a unidirectional link on a port, the port enters Disable state. In this case, DLDP prompts
you to shut down the port manually, or it shuts down the port automatically depending on the