R0106-HP MSR Router Series MPLS Command Reference(V7)

190
rsvp authentication lifetime
Use rsvp authentication lifetime to configure the idle timeout for RSVP security associations on an
interface.
Use undo rsvp authentication lifetime to restore the default.
Syntax
rsvp authentication lifetime life-time
undo rsvp authentication lifetime
Default
The idle timeout for RSVP security associations is 1800 seconds on an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
life-time: Specifies the RSVP security association idle timeout in the range of 30 to 86400 seconds.
Usage guidelines
When RSVP authentication is enabled, the device dynamically establishes security associations when
receiving and sending RSVP messages to record the message sequence numbers, which are used in RSVP
authentication.
To release memory resources, each security association has an idle timeout. When a security association
is idle for the specified timeout time, the device deletes the security association. When the device sends
or receives an authenticated RSVP message, it resets the idle timeout timer for the corresponding security
association.
The RSVP authentication idle timeout can be configured in the following views:
• RSVP view—Configuration applies to all RSVP security associations.
• RSVP neighbor view—Configuration applies only to RSVP security associations with the specified
RSVP neighbor.
• Interface view—Configuration applies only to RSVP security associations established on the current
interface.
An RSVP security association established by using the authentication key configured in a view uses the
idle timeout configured in the same view.
A modification to the idle timeout affects only security associations established after the modification. To
apply the modification to existing security associations, you must execute the reset rsvp authentication
command to delete and then reestablish the security associations.
Examples
# Configure the idle timeout for RSVP security associations on interface GigabitEthernet 2/1/1 as 100
seconds.
<Sysname> system-view
[Sysname] interface gigabitethernet 2/1/1
[Sysname-GigabitEthernet2/1/1] rsvp authentication lifetime 100