vlink-peer (OSPFv3 Area)
Function
The vlink-peer command creates and configures a virtual link.
The undo vlink-peer command removes the existing virtual link.
By default, no virtual link is configured on OSPFv3.
Format
vlink-peer router-id [ hello hello-interval | retransmit retransmit-interval | trans-delay trans-delay-interval | dead dead-interval | instance instance-id | { authentication-mode { hmac-sha256 key-id key-id { plain plain-text | [ cipher ] cipher-text } | keychain keychain-name } | ipsec sa sa-name } ] *
undo vlink-peer router-id [ hello [ hello-interval ] | retransmit [ retransmit-interval ] | trans-delay [ trans-delay-interval ] | dead [ dead-interval ] | { authentication-mode { hmac-sha256 key-id key-id | keychain } | ipsec sa [ sa-name ] } ] *
Only the S5720-EI, S5720-HI, S5730-HI, S5731-H, S5731-S, S5731S-H, S5731S-S, S5732-H, S6720-EI, S6720-HI, S6720S-EI, S6730-H, S6730S-H, S6730-S, and S6730S-S support the keychain keychain-name parameter.
Parameters
| Parameter | Description | Value |
|---|---|---|
router-id |
Specifies the router ID of a virtual link neighbor. |
The value is in dotted decimal notation. |
hello hello-interval |
Specifies the interval for sending Hello packets on an interface. This value must be equal to the hello-interval value of the switch that sets up a virtual link with the interface. |
The value is an integer ranging from 1 to 65535 seconds. By default, it is 10 seconds. |
retransmit retransmit-interval |
Specifies the interval for retransmitting the LSA packets on an interface. |
The value is an integer ranging from 1 to 3600 seconds. By default, it is 5 seconds. |
trans-delay trans-delay-interval |
Specifies the delay for sending LSA packets on an interface. |
The value is an integer ranging from 1 to 800 seconds. By default, it is 1 second. |
dead dead-interval |
Specifies the dead interval of the neighbor. This value must be equal to dead-interval of the switch that sets up the virtual link with it and must be at least four times that of the hello-interval. |
The value is an integer ranging from 1 to 65535 seconds. By default, it is 40 seconds. |
instance instance-id |
Specifies the instance ID of the virtual link. |
The value is an integer ranging from 0 to 255. By default, it is 0. |
authentication-mode |
Indicates the authentication mode over the virtual link. |
N/A |
hmac-sha256 |
Sets the HMAC-SHA256 authentication mode. |
N/A |
key-id key-id |
Specifies the key ID for authentication, which must be the same as the one configured at the other end. |
The value is an integer ranging from 1 to 65535. |
plain |
Configures the plaintext password type. Only a plaintext password can be entered, and the password is displayed in plaintext in the configuration file. NOTICE:
If plain is selected, the password is saved in the configuration file in plain text. This brings security risks. It is recommended that you select cipher to save the password in cipher text. |
N/A |
plain-text |
Specifies a plaintext password. |
The value is a string of 1 to 255 characters, spaces not supported. |
cipher |
Configures the ciphertext password type. You can enter either a plaintext or ciphertext password, but the password is displayed in ciphertext in the configuration file. |
N/A |
cipher-text |
Specifies a ciphertext password. |
The value can be a string of 1 to 255 characters for plaintext passwords and 20 to 392 characters for ciphertext passwords, spaces not supported. |
keychain |
Configures keychain authentication. NOTE:
Before you configure keychain authentication, run the keychain command to configure a keychain, the key-id command to configure a key ID, the key-string command to configure a password, and the algorithm command to configure an algorithm. If these commands are not run, OSPFv3 authentication fails. |
N/A |
keychain-name |
Specifies a keychain name. |
The value is a string of 1 to 47 case-insensitive characters. Except the question mark (?) and space. However, when double quotation marks (") are used around the string, spaces are allowed in the string. |
ipsec sa sa-name |
Specifies the name of an SA configured for an OSPFv3 virtual link. |
The value is an existing SA name. |
Usage Guidelines
You can use the vlink-peer command to set up a logical connection for non-backbone area which does not connect to the backbone area directly or discontinuous backbone area.
The virtual link can be regarded as a common interface on which OSPFv3 is enabled, because the principles of hello, retransmit, and trans-delay that are configured on the virtual link are similar.