Reference Guide
Version 8.4.2.0 Introduced on the E-Series TeraScale.
Usage
Information
Before you enable IPsec encryption on an OSPFv3 interface, you must first enable IPv6 unicast
routing globally, configure an IPv6 address and enable OSPFv3 on the interface, and assign the
interface to an area.
An SPI value must be unique to one IPsec security policy (authentication or encryption) on the
router. You must configure the same encryption policy (same SPI and key) on each OSPFv3
interface in a link.
To remove an IPsec encryption policy from an interface, enter the no ipv6 ospf encryption spi
number
command. To remove null authentication on an interface to allow the interface to
inherit the authentication policy configured for the OSPFv3 area, enter the no ipv6 ospf no ipv6
ospf encryption null command.
Related
Commands
area encryption Configure an IPsec encryption policy for an OSPFv3 area.
show crypto
ipsec policy
Display the configuration of IPsec encryption policies.
show crypto
ipsec sa ipv6
Display the security associations set up for OSPFv3 interfaces in
encryption policies.
ipv6 ospf graceful-restart helper-reject
Configure an OSPFv3 interface to not act upon the Grace LSAs that it receives from a restarting OSPFv3 neighbor.
E-Series TeraScale, Z-Series, S4810
Syntax
ipv6 ospf graceful-restart helper-reject
To disable the helper-reject role, enter no ipv6 ospf graceful-restart helper-
reject.
Defaults The helper-reject role is not configured.
Command Modes INTERFACE
Command History
Version 9.1.(0.0) Introduced on the S4810 and Z9000.
Version 8.4.2.2 Introduced on E-Series TeraScale.
Usage
Information
By default, OSPFv3 graceful restart is disabled and functions only in a helper role to help
restarting neighbor routers in their graceful restarts when it receives a Grace LSA.
When configured in a helper-reject role, an OSPFv3 router ignores the Grace LSAs that it
receives from a restarting OSPFv3 neighbor.
The graceful-restart role command is not supported in OSPFv3. When you enable the helper-
reject role on an interface, you reconfigure an OSPFv3 router to function in a “restarting-only”
role.
1237