R2511-HP MSR Router Series MPLS Command Reference(V5)

275
# Enable RSVP-TE on Ethernet 1/1.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] mpls
[Sysname-Ethernet1/1] mpls te
[Sysname-Ethernet1/1] mpls rsvp-te
mpls rsvp-te authentication
Use mpls rsvp-te authentication to enable RSVP authentication on an interface.
Use undo mpls rsvp-te authentication to disable RSVP authentication on an interface.
Syntax
mpls rsvp-te authentication { cipher | plain } auth-key
undo mpls rsvp-te authentication
Default
RSVP authentication is disabled.
Views
Interface view
Default command level
2: System level
Parameters
cipher: Sets a ciphertext key.
plain: Sets a plaintext key.
auth-key: Specifies the authentication key. This argument is case sensitive. If the cipher keyword is
specified, it must be a ciphertext string of 8 to 53 characters. If the plain keyword is specified, it must be
a string of 8 to 16 characters.
Usage guidelines
The RSVP messages sent out of the interface convey a message authentication digest created using the
hash algorithm and the configured authentication key. This authentication key is also used by the
interface to authenticate received RSVP messages. For the two interfaces at the two ends of a link to
exchange RSVP messages, they must share the same authentication key.
This hop-by-hop authentication of RSVP prevents fake resource reservation requests from occupying
network resources.
For security purposes, all keys, including keys configured in plain text, are saved in cipher text to the
configuration file.
Examples
# Enable RSVP authentication on Ethernet 1/1, and configure the authentication key as userkey1 in plain
text.
<Sysname> system-view
[Sysname] interface ethernet 1/1
[Sysname-Ethernet1/1] mpls rsvp-te authentication plain userkey1