R0106-HP MSR Router Series MPLS Command Reference(V7)

154
message digest received. If they match, the receiver accepts the message. Otherwise, it drops the
message.
RSVP authentication can be configured in the following views:
• RSVP view—Configuration applies to all RSVP security associations.
• RSVP neighbor view—Configuration applies only to RSVP security associations with the specified
RSVP neighbor.
• Interface view—Configuration applies only to RSVP security associations established on the current
interface.
Configurations in RSVP neighbor view, interface view, and RSVP view are in descending order of priority.
For example, if you have enabled RSVP authentication for a neighbor in both RSVP neighbor view and
RSVP view but configured different authentication keys, the authentication key configured in RSVP
neighbor view is used to authenticate the RSVP messages between the local device and the neighbor.
To reestablish a security association, you must delete the authentication key used by the current security
association or delete the current security association (using the reset rsvp authentication command).
Then the device can reestablish a security association by looking up a new authentication key in order
of priorities.
When using this command, follow these guidelines:
• After you enable RSVP authentication on the local device, you must also enable RSVP authentication
and configure the same authentication key on the corresponding RSVP neighbor.
• For security purposes, all keys, including keys configured in plain text, are saved in cipher text.
Examples
# Enable RSVP authentication globally, and configure the authentication key as a plaintext string of
abcdefgh.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] authentication key plain abcdefgh
# Enable RSVP authentication for the neighbor 1.1.1.9, and configure the authentication key as a plaintext
string of abcdefgh.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] peer 1.1.1.9
[Sysname-rsvp-peer-1.1.1.9] authentication key plain abcdefgh
Related commands
• authentication challenge
• authentication lifetime
• authentication window-size
• display rsvp authentication
• reset rsvp authentication
• rsvp authentication challenge
• rsvp authentication key
• rsvp authentication lifetime
• rsvp authentication window-size