28.06.2014 Views

Discussion

Discussion

Discussion

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Discussion</strong><br />

It is a good security measure to authenticate RSVP exchanges to ensure that only<br />

trusted routers participate in the LSP. This recipe shows how to configure RSVP<br />

authentication. You configure a key for each interface on the router that is running<br />

RSVP. MD5 creates an encoded checksum that is included in all transmitted RSVP<br />

packets. The receiving router verifies this checksum before accepting the packet.<br />

Use the following command to check that RSVP authentication is configured:<br />

aviva@R1> show rsvp interface detail<br />

RSVP interface: 1 active<br />

so-0/0/2.0 Index 69, State Ena/Up<br />

Authentication, NoAggregate, NoReliable, NoLinkProtection<br />

HelloInterval 9(second)<br />

Address 10.1.13.1, 10.0.0.1<br />

ActiveResv 1, PreemptionCnt 0, Update threshold 10%<br />

Subscription 100%, StaticBW 155.52Mbps, AvailableBW 155.52Mbps<br />

ReservedBW [0] 0bps[1] 0bps[2] 0bps[3] 0bps[4] 0bps[5] 0bps[6] 0bps[7] 0bps<br />

PacketType Total Last 5 seconds<br />

Sent Received Sent Received<br />

Path 1588 35 0 0<br />

PathErr 0 0 0 0<br />

PathTear 3 1 0 0<br />

Resv 34 1586 0 0<br />

ResvErr 0 0 0 0<br />

ResvTear 0 0 0 0<br />

Hello 8526 8527 1 1<br />

Ack 0 0 0 0<br />

Srefresh 0 0 0 0<br />

EndtoEnd RSVP 0 0 0 0<br />

Configure the same authentication key on all interfaces participating in the LSP. If<br />

you do not configure the same password, the LSP cannot be established and is<br />

marked as Dn (down) in the show mpls lsp command output:<br />

aviva@R1> show mpls lsp<br />

Ingress LSP: 1 sessions<br />

To From State Rt ActivePath P LSPname<br />

10.0.0.6 10.0.0.1 Dn 0 - R1-to-R6<br />

Total 1 displayed, Up 0, Down 1<br />

This LSP is not operating because authentication is not configured on R6, the egress<br />

router:<br />

aviva@R6> show rsvp interface detail<br />

RSVP interface: 1 active<br />

so-0/0/3.0 Index 66, State Ena/Up<br />

NoAuthentication, NoAggregate, NoReliable, NoLinkProtection<br />

HelloInterval 9(second)<br />

Address 10.1.36.2, 10.0.0.6<br />

ActiveResv 0, PreemptionCnt 0, Update threshold 10%<br />

Subscription 100%, StaticBW 155.52Mbps, AvailableBW 155.52Mbps<br />

ReservedBW [0] 0bps[1] 0bps[2] 0bps[3] 0bps[4] 0bps[5] 0bps[6] 0bps[7] 0bps<br />

520 | Chapter 14: MPLS<br />

This is the Title of the Book, eMatter Edition<br />

Copyright © 2008 O’Reilly & Associates, Inc. All rights reserved.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!