HP 5500 EI series - Configuring BFD for Ospfv3; Applying an Ipsec Profile

351
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter OSPFv3 view.
ospfv3 [ process-id | vpn-instance
vpn-instance-name ] *
N/A
3. Enable the GR helper
capability.
graceful-restart helper enable
By default, the GR helper capability is
enabled.
4. Enable strict LSA
checking.
graceful-restart helper
strict-lsa-checking
By default, strict LSA checking is
disabled.
Configuring BFD for OSPFv3
Bidirectional forwarding detection (BFD) provides a mechanism to quickly detect the connectivity of links
between OSPFv3 neighbors, improving the convergence speed of OSPFv3. For more information about
BFD, see High Availability Configuration Guide.
After discovering neighbors by sending hello packets, OSPFv3 notifies BFD of the neighbor addresses,
and BFD uses these addresses to establish sessions. Before a BFD session is established, it is in the down
state. In this state, BFD control packets are sent at an interval of no less than 1 second to reduce BFD
control packet traffic. After the BFD session is established, BFD control packets are sent at the negotiated
interval, thereby implementing fast fault detection.
To configure BFD for OSPFv3, you need to configure OSPFv3 first.
To configure BFD for OSPFv3:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter OSPFv3 view.
ospfv3 [ process-id | vpn-instance
vpn-instance-name ] *
N/A
3. Specify a router ID.
router-id router-id N/A
4. Quit the OSPFv3 view.
quit N/A
5. Enter interface view.
interface interface-type
interface-number
N/A
6. Enable an OSPFv3 process
on the interface.
ospfv3 process-id area area-id
[ instance instance-id ]
N/A
7. Enable BFD on the interface.
ospfv3 bfd enable [ instance
instance-id ]
By default, BFD on the interface is
disabled.
Applying an IPsec profile
To protect routing information and prevent attacks, OSPFv3 can authenticate protocol packets by using
an IPsec profile. For more information about IPsec profiles, see Security Configuration Guide.
Outbound OSPFv3 packets carry the Security Parameter Index (SPI) defined in the relevant IPsec profile.
A device uses the SPI carried in a received packet to match against the configured IPsec profile. If they