vlink-peer (OSPFv3 area view)

Use vlink-peer to configure a virtual link.

Use undo vlink-peer to remove a virtual link.

Syntax

vlink-peer router-id [ dead seconds | hello seconds | instance instance-id | ipsec-profile profile-name | keychain keychain-name | retransmit seconds | trans-delay seconds ] *

undo vlink-peer router-id [ dead | hello | ipsec-profile | keychain | retransmit | trans-delay ] *

Default

No virtual links exist.

Views

OSPFv3 area view

Predefined user roles

network-admin

Parameters

router-id: Specifies the router ID of the neighbor on the virtual link.

dead seconds: Specifies the dead interval in the range of 1 to 32768 seconds. The default is 40. The dead interval must be identical with that on the virtual link neighbor, and must be a minimum of four times the hello interval.

hello seconds: Specifies the hello interval in the range of 1 to 8192 seconds. The default is 10. It must be identical with the hello interval on the virtual link neighbor.

instance instance-id: Specifies the instance ID of a virtual link, in the range of 0 to 255. The default is 0.

ipsec-profile profile-name: Specifies an IPsec profile by its name, a case-insensitive string of 1 to 63 characters. For more information about IPsec profiles, see Security Configuration Guide.

keychain: Specifies the keychain authentication mode.

keychain-name: Specifies a keychain by its name, a case-sensitive string of 1 to 63 characters.

retransmit seconds: Specifies the retransmission interval in the range of 1 to 3600 seconds. The default is 5.

trans-delay seconds: Specifies the transmission delay interval in the range of 1 to 3600 seconds. The default is 1.

Usage guidelines

You can configure a virtual link to maintain connectivity between a non-backbone area and the backbone, or maintain connectivity within the backbone. A virtual link is similar to an interface with OSPFv3 enabled. You can configure parameters such as hello, dead, retransmit and trans-delay for the virtual link.

Both ends of a virtual link must be ABRs that are configured with the vlink-peer command.

The following guidelines apply to parameters:

The authentication mode specified for an OSPFv3 virtual link has a higher priority than the mode specified for the backbone area. If no authentication mode is specified for the virtual link, the mode specified for the backbone area applies.

When keychain authentication is configured for an OSPFv3 virtual link, OSPFv3 performs the following operations before sending a packet:

  1. Obtains a valid send key from the keychain.

    OSPFv3 does not send the packet if it fails to obtain a valid send key.

  2. Uses the key ID, authentication algorithm, and key string to authenticate the packet.

    If the key ID is greater than 65535, OSPFv3 does not send the packet.

When keychain authentication is configured for an OSPFv3 virtual link, OSPFv3 performs the following operations after receiving a packet:

  1. Uses the key ID carried in the packet to obtain a valid accept key from the keychain.

    OSPFv3 discards the packet if it fails to obtain a valid accept key.

  2. Uses the authentication algorithm and key string for the valid accept key to authenticate the packet.

    If the authentication fails, OSPFv3 discards the packet.

OSPFv3 supports only the HMAC-SHA-256 authentication algorithm.

The ID of keys used for authentication can only be in the range of 0 to 65535.

Examples

# Configure a virtual link to 10.10.0.3.

<Sysname> system-view
[Sysname] ospfv3 1
[Sysname-ospfv3-1] area 1
[Sysname-ospfv3-1-area-0.0.0.1] vlink-peer 10.10.0.3

Related commands

display ospfv3 vlink