HP 5500 Ei 5500 Si Switch Series Configuration Guide

 272 
   Route Flags: A - Aging, S - Suppressed, G - Garbage-collect 
 ---------------------------------------------------------------- 
 
 Peer FE80::20F:E2FF:FE23:82F5  on Vlan-interface100 
 Dest 1::/64, 
     via FE80::20F:E2FF:FE23:82F5, cost  1, tag 0, A, 2 Sec 
 Dest 2::/64, 
     via FE80::20F:E2FF:FE23:82F5, cost  1, tag 0, A, 2 Sec 
 
 Peer FE80::20F:E2FF:FE00:100  on Vlan-interface200 
 Dest 4::/64, 
     via FE80::20F:E2FF:FE00:100, cost  1, tag 0, A, 5 Sec 
 Dest 5::/64, 
     via...

 273 
[SwitchA] ripng 100 
[SwitchA-ripng-100] quit 
[SwitchA] interface vlan-interface 100 
[SwitchA-Vlan-interface100] ripng 100 enable 
[SwitchA-Vlan-interface100] quit 
[SwitchA] interface vlan-interface 200 
[SwitchA-Vlan-interface200] ripng 100 enable 
[SwitchA-Vlan-interface200] quit 
# Enable RIP 100 and RIP 200 on Switch B. 
 system-view 
[SwitchB] ripng 100 
[SwitchB-ripng-100] quit 
[SwitchB] interface vlan-interface 100 
[SwitchB-Vlan-interface100] ripng 100 enable...

 274 
Interface  : Vlan200                                     Cost      : 0 
 
Destination: 2::1/128                                    Protocol  : Dir\
ect 
NextHop    : ::1                                         Preference: 0 
Interface  : InLoop0                                     Cost      : 0 
 
Destination: FE80::/10                                   Protocol  : Dir\
ect 
NextHop    : ::                                          Preference: 0 
Interface  : NULL0...

 275 
NextHop    : ::                                          Preference: 0 
Interface  : NULL0                                       Cost      : 0d \
Configuring RIPng IPsec policies 
Network requirements 
In the following figure, configure RIPng on the switches, and configure IPsec policies on the switches to 
authenticate and encrypt protocol packets.  
Figure 105 Network diagram 
 
 
Configuration procedure 
1. Configure IPv6 addresses for inte rfaces. (Details not shown.) 
2. Configure RIPng basic...

 276 
reference IPsec proposal tran1, set the SPIs of the inbound and outbound SAs to 12345, and the 
keys for the inbound and outbound SAs using ESP to abcdefg. 
[SwitchA] ipsec proposal tran1 
[SwitchA-ipsec-proposal-tran1] encapsulation-mode transport 
[SwitchA-ipsec-proposal-tran1] transform esp 
[SwitchA-ipsec-proposal-tran1] esp encryption-algorithm des 
[SwitchA-ipsec-proposal-tran1] esp authentication-algorithm sha1 
[SwitchA-ipsec-proposal-tran1] quit 
[SwitchA] ipsec policy policy001 10 manual...

 277 
[SwitchC-ipsec-policy-manual-policy001-10] sa string-key outbound esp ab\
cdefg 
[SwitchC-ipsec-policy-manual-policy001-10] sa string-key inbound esp abc\
defg 
[SwitchC-ipsec-policy-manual-policy001-10] quit 
4. Apply the IPsec policies in the RIPng process:  
# Configure Switch A. 
[SwitchA] ripng 1 
[SwitchA-ripng-1] enable ipsec-policy policy001 
[SwitchA-ripng-1] quit 
# Configure Switch B. 
[SwitchB] ripng 1 
[SwitchB-ripng-1] enable ipsec-policy policy001 
[SwitchB-ripng-1] quit 
# Configure...

 278 
Configuring OSPFv3 
Hardware compatibility 
The HP 5500 SI Switch Series does not support OSPFv3.  
Introduction to OSPFv3 
OSPFv3 overview 
O p e n  S h o r t e s t  Pa t h  Fi r s t  ve r s io n  3  ( OS P F v 3 )  s u p p o r t s  I P v 6  a n d  c o m p l i e s  wi t h  R F C  2740  ( OS P F  fo r  I P v 6 ) .  
The term router in this chapter refers to both routers and Layer 3 switches. 
OSPFv3 and OSPFv2 have the following similarities: 
•  32-bits router ID and area ID 
•   Packets,...

 279 
•  Instance ID —Instance ID for a link. 
•   0—Reserved. It must be 0. 
OSPFv3 LSA types  
OSPFv3 sends routing information in LSAs, which, as  defined in RFC 2740, have the following types: 
•   Router-LSA —Originated by all routers. This LSA descri bes the collected states of the routers 
interfaces to an area, and is flood ed throughout a single area only. 
•   Network-LSA —Originated for broadcast and NBMA networks by the Designated Router. This LSA 
contains the list of routers connected to...

 280 
LSA delay time 
Each LSA has an age in the local LSDB (incremented by one per second), but an LSA does not age on 
transmission. You must add an LSA delay time into the age time before transmission, which is important 
for low-speed networks.  
SPF timer 
Whenever the LSDB changes, an SPF calculation occurs. If recalculations become frequent, a large 
amount of resources will be occupied. You can adjust the SPF calculation interval and delay time to 
protect networks from being overloaded by...

 281 
Task  Remarks 
Configuring a priority for OSPFv3 Optional 
Configuring OSPFv3 route redistribution Optional 
Tuning and optimizing OSPFv3 
networks Configuring OSPFv3 timers 
Optional 
Configuring a DR priority for an interface Optional 
Ignoring MTU check for DD packets Optional 
Disabling interfaces from receiving and sending 
OSPFv3 packets Optional 
Enabling the logging of neighbor state changes 
Optional 
Configuring OSPFv3 GR Configuring GR Restarter 
Optional Configuring GR Helper Optional...