Users Guide
Version Description
9.8(0.0P5) Introduced on the S4048-ON.
9.8(0.0P2) Introduced on the S3048-ON.
9.2(1.0) Introduced on the Z9500.
9.1.(0.0) Introduced on S4810 and Z9000.
8.4.2.0 Introduced on the E-Series.
8.3.19.0 Introduced on the S4820T.
Usage Information
Before you enable IPsec authentication on an OSPFv3 interface, rst enable IPv6 unicast routing globally,
congure an IPv6 address and enable OSPFv3 on the interface, and assign the interface to an area.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the router.
Congure the same authentication policy (same SPI and key) on each OSPFv3 interface in a link.
To remove an IPsec authentication policy from an interface, enter the no ipv6 ospf authentication spi
number command. To remove null authentication on an interface to allow the interface to inherit the
authentication policy congured for the OSPFv3 area, enter the no ipv6 ospf authentication
null command.
Related Commands
area authentication – congures an IPsec authentication policy for an OSPFv3 area.
show crypto ipsec policy – displays the conguration of IPsec authentication policies.
show crypto ipsec sa ipv6 – displays the security associations set up for OSPFv3 interfaces in
authentication policies.
ipv6 ospf bfd all-neighbors
Establish BFD sessions with all OSPFv3 neighbors on a single interface or use non-default BFD session parameters.
Syntax
ipv6 ospf bfd all-neighbors [disable | [interval interval min_rx min_rx
multiplier value role {active | passive}]]
To disable all BFD sessions on an OSPFv3 interface implicitly, use the no ipv6 ospf bfd all-
neighbors disable command in interface mode..
Parameters
disable (OPTIONAL) Enter the keyword disable to disable BFD on this interface.
interval milliseconds (OPTIONAL) Enter the keyword interval to specify non-default BFD session
parameters beginning with the transmission interval. The range is from 50 to 1000.
The default is 200.
min_rx milliseconds Enter the keywords min_rx to specify the minimum rate at which the local system
receives control packets from the remote system. The range is from 50 to 1000.
The default is 200.
multiplier value Enter the keyword multiplier to specify the number of packets that must be
missed in order to declare a session down. The range is from 3 to 50. The default is
3.
role [active |
passive]
Enter the role that the local system assumes:
Open Shortest Path First (OSPFv2 and OSPFv3)
1113