mpls rsvp-te authentication lifetime (Interface view)

Function

The mpls rsvp-te authentication lifetime command sets the RSVP-TE authentication lifetime.

The undo mpls rsvp-te authentication lifetime command restores the default RSVP-TE authentication lifetime.

By default, the RSVP-TE authentication lifetime is 30 minutes.

Format

mpls rsvp-te authentication lifetime lifetime

undo mpls rsvp-te authentication lifetime

Parameters

Parameter	Description	Value
lifetime	Specifies the authentication lifetime formatted as HH:MM:SS.	The value ranges from 00:00:01 to 23:59:59. The default value is 00:30:00.

Parameter

Description

Value

lifetime

Specifies the authentication lifetime formatted as HH:MM:SS.

The value ranges from 00:00:01 to 23:59:59. The default value is 00:30:00.

Views

100ge sub-interface view, 100GE interface view, 10GE sub-interface view, 10GE interface view, 25GE sub-interface view, 25GE interface view, 400GE sub-interface view, 400GE interface view, 40GE sub-interface view, 40GE interface view, 50GE sub-interface view, 50GE interface view, Eth-Trunk sub-interface view, Eth-Trunk interface view, GE optical interface view, GE sub-interface view, GE electrical interface view, GMPLS-UNI interface view, Tunnel interface view, XGE sub-interface view, XGE interface view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
mpls-te	write

Usage Guidelines

Usage Scenario

Enable RSVP authentication before running the mpls rsvp-te authentication lifetime command.

If no CR-LSP exists between RSVP neighbors, an RSVP adjacency remains until the RSVP authentication lifetime elapses, preventing frequent handshakes. Configuring the RSVP authentication lifetime does not affect existing CR-LSPs.

The lifetime setting helps prevent RSVP authentication from failing to stop. For example, RTA and RTB establish an RSVP authentication relationship. If the key carried in packets that RTA sends to RTB is damaged because the packets are tampered with, RTB discards the packets after receiving them and detecting the incorrect key. Without a lifetime set, this process repeats because the authentication relationship cannot be torn down. To prevent this issue, set a lifetime value. If valid packets are received within the lifetime, the RSVP authentication lifetime is reset. If no valid packets received after the lifetime elapses, the RSVP-TE authentication relationship is torn down.The authentication period must be greater than or equal to three times as long as the update time.The default value is recommended.

Example

# Set the authentication lifetime to 40 minutes.

<HUAWEI> system-view
[~HUAWEI] mpls
[*HUAWEI-mpls] mpls te
[*HUAWEI-mpls] mpls rsvp-te
[*HUAWEI-mpls] quit
[*HUAWEI] interface GigabitEthernet 0/1/0
[*HUAWEI-GigabitEthernet0/1/0] mpls
[*HUAWEI-GigabitEthernet0/1/0] mpls te
[*HUAWEI-GigabitEthernet0/1/0] mpls rsvp-te
[*HUAWEI-GigabitEthernet0/1/0] mpls rsvp-te authentication cipher Huawei-123
[*HUAWEI-GigabitEthernet0/1/0] mpls rsvp-te authentication lifetime 00:40:00