PurposeCommand or Action
• tcp—Select tcp to connect to the RPKI
cache using TCP (unencrypted).
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#transport ssh
port 1
• port port_number—Specify a port number
for the specified RPKI cache transport.
Or
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#transport tcp
port 2
Range for the port number is 1 to 65535 for
both ssh and tcp.
You can set the transport to either TCP
or SSH. Change of transport causes the
cache session to flap.
Note
(Optional)
Specifies a (SSH) username for the RPKI
cache-server.
username user_name
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#username
ssh_rpki_uname
Step 5
(Optional)
Specifies a (SSH) password for the RPKI
cache-server.
password password
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#password
ssh_rpki_pass
Step 6
The “username” and “password”
configurations only apply if the SSH
method of transport is active.
Note
Specifies a preference value for the RPKI cache.
Range for the preference value is 1 to 10. Setting
a lower preference value is better.
preference preference_value
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#preference 1
Step 7
Configures the time BGP waits to keep routes
from a cache after the cache session drops. Set
purge-time time
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#purge-time 30
Step 8
purge time in seconds. Range for the purge time
is 30 to 360 seconds.
Configures the time BGP waits in between
sending periodic serial queries to the cache. Set
Use one of these commands.
Step 9
•
refresh-time time
refresh-time in seconds. Range for the refresh time
is 15 to 3600 seconds.
•
refresh-time off
Configure the off option to specify not to send
serial-queries periodically.
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#refresh-time
20
Or
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#refresh-time
off
Configures the time BGP waits for a response
after sending a serial or reset query. Set
Use one these commands.
Step 10
•
response-time time
response-time in seconds. Range for the response
time is 15 to 3600 seconds.
•
response-time off
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
68
Implementing BGP
BGP Prefix Origin Validation Based on RPKI