HPE FlexNetwork 5510 HI Series Layer 3 - Ip Routing Configuration Guide

365
To enable OSPFv3 NSR:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter OSPFv3
view.
ospfv3
[ process-id |
vpn-instance
vpn-instance-name ] *
N/A
3. Enable OSPFv3
NSR.
non-stop-routing
By default, OSPFv3 NSR is disabled.
Configuring BFD for OSPFv3
Bidirectional forwarding detection (BFD) provides a mechanism to quickly detect the connectivity of
links between OSPFv3 neighbors, improving the convergence speed of OSPFv3. For more
information about BFD, see High Availability Configuration Guide.
After discovering neighbors by sending hello packets, OSPFv3 notifies BFD of the neighbor
addresses, and BFD uses these addresses to establish sessions. Before a BFD session is
established, it is in the down state. In this state, BFD control packets are sent at an interval of no less
than 1 second to reduce BFD control packet traffic. After the BFD session is established, BFD control
packets are sent at the negotiated interval, thereby implementing fast fault detection.
To configure BFD for OSPFv3, you need to configure OSPFv3 first.
To configure BFD for OSPFv3:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Enter OSPFv3 view.
ospfv3
[ process-id |
vpn-instance
vpn-instance-name ] *
N/A
3. Specify a router ID.
router-id
router-id N/A
4. Quit the OSPFv3 view.
quit
N/A
5. Enter interface view.
interface
interface-type
interface-number
N/A
6. Enable an OSPFv3 process
on the interface.
ospfv3
process-id
area
area-id
[
instance
instance-id ]
N/A
7. Enable BFD on the interface.
ospfv3 bfd enable
[
instance
instance-id ]
By default, BFD on the interface is
disabled.
Applying an IPsec profile
To protect routing information and prevent attacks, OSPFv3 can authenticate protocol packets by
using an IPsec profile. For more information about IPsec profiles, see Security Configuration Guide.
Outbound OSPFv3 packets carry the Security Parameter Index (SPI) defined in the relevant IPsec
profile. A device uses the SPI carried in a received packet to match against the configured IPsec
profile. If they match, the device accepts the packet. Otherwise, the device discards the packet and
will not establish a neighbor relationship with the sending device.
You can configure an IPsec profile for an area, an interface, a virtual link, or a sham link.
• To implement area-based IPsec protection, configure the same IPsec profile on the routers in
the target area.

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English