R2511-HP MSR Router Series MPLS Command Reference(V5)
185
retrans-interval: Specifies the interval at which the interface retransmits LSAs. The value range is 1 to
8192 seconds, and the default is 5 seconds.
delay: Specifies the delay interval before the interface sends an LSA. The value range is 1 to 8192
seconds, and the default is 1 second.
simple [ cipher | plain ] password1: Uses simple authentication.
• cipher: Sets a ciphertext key.
• plain: Sets a plaintext key.
• password1: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be
a ciphertext string of 1 to 41 characters. If plain is specified, it must be a string of 1 to 8 characters.
If neither cipher nor plain is specified, you set a plaintext key string.
md5: Uses MD5 algorithm for authentication.
hmac-md5: Uses HMAC-MD5 algorithm for authentication.
key-id: Specifies the authentication key ID of the interface, in the range of 1 to 255. It must be the same
as that of the peer.
• cipher: Sets a ciphertext key.
• plain: Sets a plaintext key.
• password2: Specifies the key string. This argument is case sensitive. If cipher is specified, it must be
a ciphertext string of 1 to 53 characters. If plain is specified, it must be a string of 1 to 16 characters.
If neither cipher nor plain is specified, you can set a plaintext key of 1 to 16 characters or a
ciphertext key of 33 to 53 characters.
Usage guidelines
If two PEs belong to the same AS and a backdoor link is present, a sham link can be established between
them.
If you configure authentication for a sham link, you must configure the same area authentication mode for
all routers in the area.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text to the
configuration file.
Examples
# Create a sham link with the source address of 1.1.1.1 and the destination address of 2.2.2.2.
<Sysname> system-view
[Sysname] ospf
[Sysname-ospf-1] area 0
[Sysname-ospf-1-area-0.0.0.0] sham-link 1.1.1.1 2.2.2.2
tnl-policy (VPN instance view/IPv4 VPN view)
Use tnl-policy to associate the current VPN instance with a tunneling policy.
Use undo tnl-policy to remove the association.
Syntax
tnl-policy tunnel-policy-name
undo tnl-policy