R2511-HP MSR Router Series Security Command Reference(V5)

565
[Sysname-gdoi-ks-group-abc] redundancy enable
[Sysname-gdoi-ks-group-abc]
Related commands
gdoi ks group
redundancy hello
Use redundancy hello to configure the redundancy hello packet sending interval, and the maximum
number of consecutive failures allowed in receiving redundancy hello packets before the secondary KS
considers itself disconnected from the primary KS.
Use undo redundancy enable to restore the default.
Syntax
redundancy hello { interval interval | number number } *
undo redundancy hello [ interval | number ]
Default
As the primary KS, the device sends redundancy hello packets regularly at an interval of 20 seconds. As
a secondary KS, the device initiates primary KS re-election when it failed to receive redundancy hello
packets from the primary KS for 3 times consecutively.
Views
GDOI KS group view
Default command level
2: System level
Parameters
interval interval: Specifies the redundancy hello packet sending interval in the range of 20 to 60
seconds.
number number: Specifies the maximum number of consecutive failures allowed in receiving redundancy
hello packets, in the range of 3 to 10.
Usage guidelines
The primary KS periodically sends hello packets to all secondary KSs to inform the secondary KSs of the
keepalive status. The secondary KSs are not required to respond to the hello packets.
After primary KS selection, the primary KS informs the secondary KS of the keepalive time. If a secondary
KS does not receive the redundancy hello packets from the primary KS after the configured number of
attempts, it considers itself disconnected from the primary KS, and triggers primary KS re-election.
When the primary KS detects a disconnection from a secondary KS, it informs the secondary KS of the
disconnection through hello packets. The secondary KS tries to reestablish a connection with the primary
KS if it receives the hello packet. If the connection cannot be established, primary KS re-election is
triggered.
Do not set a long hello packet sending interval. Otherwise, secondary KSs cannot timely detect a
primary KS failure or a link failure.
You can increase the value of the number argument for KSs connected to not-so-good links to avoid
unnecessary primary KS re-elections caused by link transmission failures.