HP MSR2000/3000/4000 Router Series MPLS Command Reference

100
receiver receives the message, it performs the same calculation and compares the result with the message
digest received. If they match, the receiver accepts the message. Otherwise, it drops the message.
RSVP authentication can be configured in the following views:
• RSVP view—Configuration in this view applies to all RSVP messages.
• RSVP neighbor view—Configuration in this view applies only to RSVP messages received from and
sent to the specified neighbor.
• Interface view—Configuration in this view applies only to RSVP messages received and sent by the
current interface.
Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of priority.
For example, if you have enabled RSVP authentication for a neighbor in both RSVP neighbor view and
RSVP view but configured different authentication keys, the authentication key configured in RSVP
neighbor view is used to authenticate the RSVP messages between the local device and the neighbor.
To re-establish a security association, you must delete the authentication key used by the current security
association or delete the current security association (using the reset rsvp authentication command).
Then the device can re-establish a security association by looking up a new authentication key in order
of priorities.
When using this command, follow these guidelines:
• After you enable RSVP authentication on the local device, you must also enable RSVP authentication
and configure the same authentication key on the corresponding RSVP neighbor.
• All keys, including keys configured in plain text, are saved in cipher text.
Examples
# Enable RSVP authentication globally, and configure the authentication key as a plaintext string of
abcdefgh.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] authentication key plain abcdefgh
# Enable RSVP authentication for the neighbor 1.1.1.9, and configure the authentication key as a plaintext
string of abcdefgh.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] peer 1.1.1.9
[Sysname-rsvp-peer-1.1.1.9] authentication key plain abcdefgh
Related commands
• authentication challenge
• authentication lifetime
• authentication window-size
• display rsvp authentication
• reset rsvp authentication
• rsvp authentication challenge
• rsvp authentication key
• rsvp authentication lifetime
• rsvp authentication window-size