PurposeCommand or Action
• tcp—Select tcp to connect to the RPKI
cache using TCP (unencrypted).
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#transport ssh
port 22
• port port_number—Specify a port number
for the specified RPKI cache transport. For
Or
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#transport tcp
port 2
tcp, the range of supported port number is 1
to 65535. For ssh, use port number 22.
Do not specify a custom port
number for RPKI cache transport
over SSH. You must use port 22 for
RPKI over SSH.
Note
You can set the transport to either TCP
or SSH. Change of transport causes the
cache session to flap.
Note
(Optional)
Specifies a (SSH) username for the RPKI
cache-server.
username user_name
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#username
ssh_rpki_uname
Step 5
(Optional)
Specifies a (SSH) password for the RPKI
cache-server.
password password
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#password
ssh_rpki_pass
Step 6
The “username” and “password”
configurations only apply if the SSH
method of transport is active.
Note
Specifies a preference value for the RPKI cache.
Range for the preference value is 1 to 10. Setting
a lower preference value is better.
preference preference_value
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#preference 1
Step 7
Configures the time BGP waits to keep routes from
a cache after the cache session drops. Set purge
purge-time time
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#purge-time 30
Step 8
time in seconds. Range for the purge time is 30 to
360 seconds.
Configures the time BGP waits in between sending
periodic serial queries to the cache. Set
Use one of these commands.
Step 9
•
refresh-time time
refresh-time in seconds. Range for the refresh time
is 15 to 3600 seconds.
•
refresh-time off
Configure the off option to specify not to send
serial-queries periodically.
Example:
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#refresh-time
20
Or
RP/0/RSP0/CPU0:router(config-bgp-rpki-server)#refresh-time
off
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.1.x
66 OL-30423-03
Implementing BGP
BGP Prefix Origin Validation Based on RPKI