Configuring IP Router Parameters
40 Router Configuration Guide
Example 2: Configure a SeND interface with modifiers.
configure router interface itf2
address 10.10.10.2
port 1/1/2
ipv6
secure-nd
link-local-modifier 0xABCD
=> The offline generated modifier is used to generate the link-local CGA.
no shutdown
exit
address 3000:1::/64
=> A modifier is generated based on the actual RSA key pair. The modifier is used to generate
the global CGA.
=> The modifier is stored in the interface configuration file.
address 3000:2::/64 modifier 0xABCD
=> The same offline generated modifier as the link-local address above is used for the
generation of a global address.
address 3000:3::/64 modifier 0xABCD
=> Another offline generated modifier (*) is used for the generation of a global address.
=> For an offline generated modifier, a check is done to see if it is generated with the actual
RSA key pair and the security parameter applicable for the interface. If this check fails, the
command is refused, unless the command is triggered in the context of an exec of a config
file: in this case, the modifier will be replaced by a new one that is generated based on the
actual RSA key pair.
Making non-persistent CGAs persistent
CGAs can be non-persistent because:
• The operator forgot to configure an RSA key pair for SeND and hence the CGAs
were generated based on an auto-generated RSA key pair.
• The operator forgot to synchronize an RSA key pair file to the stand-by CPM and a
switch-over happens.
• The CGAs were generated by a software version not having persistent CGAs (such
as, ISSU).
To Next Page
Loading...
