R0106-HP MSR Router Series MPLS Command Reference(V7)

184
Usage guidelines
After you enter RSVP neighbor view by using this command, you can configure RSVP authentication
information for the specified RSVP neighbor, such as the authentication key and idle timeout of the
security association.
After the device receives an RSVP message with an authentication object, it checks whether it has an
RSVP authentication neighbor that matches the IP address in PHOP of the message (Path or Path Tear
message) or matches the source IP address in the message (message other than Path and Path Tear). If
a matching neighbor exists and an authentication key has been configured for the neighbor, the device
verifies the validity of the message according to the key. Otherwise, the device uses the authentication
key configured in interface view or RSVP view to verify the message validity. If no authentication key is
configured in any view, the device ignores the authentication object carried in the message and accepts
the message.
When sending an RSVP message, the device checks whether it has a matching authentication neighbor
according to the next hop address for the destination address in the RSVP message. If a matching
neighbor exists and an authentication key has been configured for the neighbor, the device sets the
authentication object of the message according to the key. Otherwise, the device uses the authentication
key configured in interface view or RSVP view to set the authentication object. If no authentication key is
configured in any view, the device does not add an authentication object in the message.
If an FRR occurs, the downstream authentication neighbor of the PLR node is the destination IP address
of the bypass tunnel. The upstream authentication neighbor of the MP node is the IP address of the
physical outgoing interface of the bypass tunnel on the PLR.
Examples
# Create RSVP authentication neighbor 1.1.1.1, enter RSVP neighbor view, and configure a plaintext
authentication key abcdfegh for the neighbor.
<Sysname> system-view
[Sysname] rsvp
[Sysname-rsvp] peer 1.1.1.1
[Sysname-rsvp-peer-1.1.1.1] authentication key plain abcdfegh
Related commands
• authentication challenge
• authentication key
• authentication lifetime
• authentication window-size
refresh interval
Use refresh interval to configure the refresh interval for Path and Resv messages.
Use undo refresh interval to restore the default.
Syntax
refresh interval interval
undo refresh interval
Default
The refresh interval for Path and Resv messages is 30 seconds.