HP MSR2000/3000/4000 Router Series MPLS Command Reference

101
authentication lifetime
Use authentication lifetime in RSVP view to configure the global idle timeout for RSVP security
associations or in RSVP neighbor view to configure the idle timeout for RSVP security associations with a
specific RSVP neighbor.
Use authentication lifetime to restore the default.
Syntax
authentication lifetime life-time
undo authentication lifetime
Default
The idle timeout for an RSVP security association is 1800 seconds.
Views
RSVP view, RSVP neighbor view
Predefined user roles
network-admin
Parameters
life-time: Specifies the RSVP security association idle timeout in the range of 30 to 86400 seconds.
Usage guidelines
When RSVP authentication is enabled, the device dynamically establishes security associations when
receiving and sending RSVP messages.
To release memory resources, each security association has an idle timeout. When a security association
is idle for the specified timeout time, the device deletes the security association. When the device sends
or receives an authenticated RSVP message, it resets the idle timeout timer for the corresponding security
association.
The RSVP authentication idle timeout can be configured in the following views:
• RSVP view—Configuration in this view applies to all RSVP messages.
• RSVP neighbor view—Configuration in this view applies only to RSVP messages received from and
sent to the specified neighbor.
• Interface view—Configuration in this view applies only to RSVP messages received and sent by the
current interface.
An RSVP security association established by using the authentication key configured in a view uses the
idle timeout configured in the same view.
A modification to the idle timeout affects only security associations established after the modification. To
apply the new setting to existing security associations, you must execute the reset rsvp authentication
command to delete and then reestablish the security associations.
Examples
# Configure the global idle timeout as 100 seconds for RSVP security associations.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] authentication lifetime 100
# Configure the idle timeout as 100 seconds for the security associations with the RSVP neighbor 1.1.1.9.