147
A TCP connection is required when one of the following conditions exists:
• A new MSDP peer is created.
• A previously deactivated MSDP peering connection is reactivated.
• A previously failed MSDP peer attempts to resume operation.
You can adjust the interval between MSDP peering connection attempts.
To enhance MSDP security, configure a key for MD5 authentication used by both MSDP peers to
establish a TCP connection. If the MD5 authentication fails, the TCP connection cannot be established.
IMPORTANT:
The MSDP peers involved in MD5 authentication must be confi
ured with the same authentication method
and key. Otherwise, the authentication fails and the TCP connection cannot be established.
To control MSDP peering connections:
Ste
Command
Remarks
1. Enter system view.
system-view N/A
2. Enter MSDP view.
msdp [ vpn-instance
vpn-instance-name ]
N/A
3. Tear down an MSDP peering
connection.
shutdown peer-address
By default, an MSDP peering
connection is active.
4. Set the keepalive timer and
peer hold timer for an MSDP
session.
timer keepalive keepalive holdtime
By default, the keepalive timer and
peer hold timer is 60 seconds and
75 seconds, respectively.
This command immediately takes
effect on an established session.
5. Configure the interval between
MSDP peering connection
attempts.
timer retry interval The default setting is 30 seconds.
6. Configure MD5 authentication
for both MSDP peers to
establish a TCP connection.
peer peer-address password
{ cipher | simple } password
By default, MD5 authentication is
not performed before a TCP
connection is established.
Configuring SA message related parameters
This section describes how to configure SA message related parameters.
Configuration prerequisites
Before you configure SA message delivery, complete the following tasks:
• Configure a unicast routing protocol so that all devices in the domain are interoperable at the
network layer.
• Configure basic MSDP functions.
To Next Page
Loading...
Need help?
General
