177
Before grouping multiple routers into an MSDP mesh group, make sure these routers are interconnected
with one another.
To create an MSDP mesh group:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public network MSDP
view or VPN instance MSDP
view.
msdp
[
vpn-instance
vpn-instance-name
]
N/A
3.
Create an MSDP mesh group
and assign an MSDP peer to
that mesh group.
peer
peer-address
mesh-group
name
An MSDP peer does not belong to
any mesh group by default.
If you configure more than one
mesh group on an MSDP peer,
only most recent configuration
takes effect.
Configuring MSDP peer connection control
MSDP peers are interconnected over TCP (port number 639). You can flexibly control sessions between
MSDP peers by manually deactivating and reactivating the MSDP peering connections. When the
connection between two MSDP peers is deactivated, SA messages will no longer be delivered between
them, and the TCP connection is closed without any connection setup retry. The configuration information,
however, remains unchanged.
A TCP connection is required in the following situations:
•
When a new MSDP peer is created
•
When a previously deactivated MSDP peer connection is reactivated
•
When a previously failed MSDP peer attempts to resume operation
You can adjust the interval between MSDP peering connection retries.
To enhance MSDP security, configure a password for MD5 authentication used by both MSDP peers to
establish a TCP connection. If the MD5 authentication fails, the TCP connection cannot be established.
IMPORTANT:
The MSDP peers involved in MD5 authentication must be configured with the same authentication method
and password. Otherwise, the authentication fails and the TCP connection cannot be established.
To configure MSDP peer connection control:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter public network MSDP
view or VPN instance MSDP
view.
msdp
[
vpn-instance
vpn-instance-name
]
N/A
3.
Deactivate an MSDP peer.
shutdown
peer-address
Optional.
Active by default.