HP VPN Firewall Appliances High Availability Configuration Guide

252
Ste
p
Command Remarks
4. Configure the source IP
address of echo packets.
bfd echo-source-ip ip-address
Optional.
The source IP address should not
be on the same network segment
as any local interface's IP address.
Otherwise, a large number of
ICMP redirect packets might be
sent from the peer, resulting in link
congestion.
5. Enter interface view.
interface interface-type
interface-number
N/A
6. Configure the minimum
interval for receiving BFD
echo packets.
bfd min-echo-receive-interval
value
Optional.
For more information, see the
description of the Required Min
Echo RX Interval field in "BFD
pac
ket format."
7. Configure the minimum
interval for transmitting BFD
control packets.
bfd min-transmit-interval value
Optional.
For more information, see the
description of the Desired Min TX
Interval field in "BFD packet
format."
8. Configure the minimum
interval for receiving BFD
control packets.
bfd min-receive-interval value
Optional.
For more information, see the
description of the Required Min RX
Interval field in "BFD packet
format."
9. Configure the detection time
multiplier.
bfd detect-multiplier value
Optional.
For more information, see the
description of the Detect Mult field
in "BFD packet format."
5 b
y default.
10. Configure the authentication
mode on the interface.
bfd authentication-mode { md5
key-id [ cipher ] key | sha1 key-id
[ cipher ] key | simple key-id
[ cipher ] password }
Optional.
By default, the interface does not
authenticate BFD packets.
In Figure 158, if you configure the Desired Min TX Interval as 100 milliseconds, Required Min RX Interval
as 300 milliseconds, and Detect Mult as 5 on Router A, and then configure the Desired Min TX Interval
as 150 milliseconds, Required Min RX Interval as 400 milliseconds, and Detect Mult as 10 on Router B:
• The actual transmitting interval on Router A is 400 milliseconds, which is the greater value between
the minimum interval for transmitting BFD control packets on Router A (100 milliseconds) and the
minimum interval for receiving BFD control packets on Router B (400 milliseconds).
• The actual transmitting interval on Router B is 300 milliseconds, which is the greater value between
the minimum interval for transmitting BFD control packets on Router B (150 milliseconds) and the
minimum interval for receiving BFD control packets on Router A (300 milliseconds).
• The actual detection time on Router A is 3000 milliseconds, which is 10 × 300 milliseconds (Detect
Mult on Router B × actual transmitting interval on Router B).