HPE FlexNetwork MSR Series Comware 5 Security Configuration Guide

459
Configuring GDOI KS redundancy
The following describes GDOI KS redundancy settings:
• UDP port number—Specifies the UDP port number that a GDOI KS uses to send and receive
redundancy protocol packets to and from other KSs. All KSs in the same GDOI KS group must
use the same UDP port number.
• Peer address—Specifies the IP address of a peer KS.
• Local priority—Specifies the priority of the local KS for primary KS election. A greater value
indicates a higher priority. If multiple KSs have the same priority, the KS with the highest IP
address is elected as the primary KS.
• Redundancy enable—Enables GDOI KS redundancy.
• Redundancy hello—Configures the following settings:
{ Redundancy hello packet sending interval for the primary KS.
{ Maximum number of consecutive failures allowed in receiving redundancy hello packets
before the secondary KS considers itself to be disconnected from the primary KS.
Configure the redundancy hello parameters reasonably to make the secondary KS timely know
the primary KS keepalive status.
• Redundancy retransmit—Specifies redundancy protocol packet (expect hello packet)
retransmission interval and the number of retransmissions.
Follow these guidelines when you configure GDOI KS redundancy:
• The KSs for KS redundancy must have the same KS group configuration expect peer IP
address, local priority, and source address of outgoing KS packets.
• In a GDOI KS group, you must specify the IP addresses of all peer KSs that back up the local
KS.
• The IP address of a peer KS specified on the local KS must be the same as the source address
that the peer KS uses to send redundancy protocol packets.
To configure GDOI KS redundancy:
Step Command Remarks
1. Enter system view.
system-view
N/A
2. Configure the UDP port
number for listening to
redundancy protocol
packets.
gdoi ks redundancy port
port-number
By default, the KS listens to
UDP port 19000 for
redundancy protocol packets.
3. Enter GDOI KS group
view.
gdoi ks group
group-name
N/A
4. Specify a peer KS.
peer address
ip-address
By default, no peer KS is
specified.
5. Configure a local priority.
local priority
priority
Optional.
By default, the local priority is 1.
6. Enable GDOI KS
redundancy.
redundancy enable
By default, GDOI KS
redundancy is disabled.

HPE FlexNetwork MSR Series Specifications

General

Brand	HPE
Model	FlexNetwork MSR Series
Category	Network Router
Language	English