The mpls rsvp-te authentication lifetime command sets the RSVP-TE authentication lifetime.
The undo mpls rsvp-te authentication lifetime command restores the default RSVP-TE authentication lifetime.
By default, the RSVP-TE authentication lifetime is 30 minutes.
| Parameter | Description | Value |
|---|---|---|
| lifetime | Specifies the authentication lifetime. | The value ranges from 00:00:01 to 23:59:59 in the format of HH:MM:SS. The default value is 00:30:00. |
VLANIF interface view, GE interface view, XGE interface view, MultiGE interface view, 25GE interface view, 40GE interface view, 100GE interface view, Eth-trunk interface view, RSVP-TE neighbor view
Usage Scenario
When no CR-LSP exists between RSVP neighbors, the RSVP adjacency remains until the RSVP authentication lifetime expires. The configuration of the RSVP authentication time does not affect the status of existing CR-LSPs.
This function can avoid continuous RSVP authentication. For example, when RSVP authentication is enabled between RTA and RTB, but the key is damaged because the RSVP messages sent from RTA to RTB are incorrect, RTB receives and discards the messages. This can cause RTA to continuously send RTB the faulty RSVP messages and RTB to continuously discard these RSVP messages. The authentication relationship between the neighbors, however, cannot be torn down. In this case, the authentication lifetime needs to be configured. When a neighbor is able to receive a valid RSVP message within the lifetime, the RSVP authentication lifetime resets. Otherwise, the authentication relationship between RSVP-TE neighbors is deleted after the authentication lifetime expires.
Prerequisites
The RSVP authentication function must have been enabled by running the mpls rsvp-te authentication { { cipher | plain } auth-key | keychain keychain-name } command in the interface view or the MPLS RSVP-TE neighbor view.
# Set the authentication lifetime to 40 minutes.
<HUAWEI> system-view [HUAWEI] mpls rsvp-te peer 10.0.0.1 [HUAWEI-mpls-rsvp-te-peer-10.0.0.1] mpls rsvp-te authentication cipher beijing123 [HUAWEI-mpls-rsvp-te-peer-10.0.0.1] mpls rsvp-te authentication lifetime 00:40:00
# Set the authentication lifetime to 20 minutes.
<HUAWEI> system-view [HUAWEI] interface vlanif 100 [HUAWEI-Vlanif100] mpls [HUAWEI-Vlanif100] mpls te [HUAWEI-Vlanif100] mpls rsvp-te [HUAWEI-Vlanif100] mpls rsvp-te authentication cipher beijing123 [HUAWEI-Vlanif100] mpls rsvp-te authentication lifetime 00:20:00
<HUAWEI> system-view [HUAWEI] interface gigabitethernet 0/0/1 [HUAWEI-GigabitEthernet0/0/1] undo portswitch [HUAWEI-GigabitEthernet0/0/1] mpls [HUAWEI-GigabitEthernet0/0/1] mpls te [HUAWEI-GigabitEthernet0/0/1] mpls rsvp-te [HUAWEI-GigabitEthernet0/0/1] mpls rsvp-te authentication cipher beijing123 [HUAWEI-GigabitEthernet0/0/1] mpls rsvp-te authentication lifetime 00:20:00