Configuring zero field check on ripng packets, Applying ipsec policies for ripng – H3C Technologies H3C SR8800 User Manual
Page 301
285
To configure poison reverse:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter interface view.
interface interface-type
interface-number
N/A
3.
Enable the poison reverse
function.
ripng poison-reverse
Disabled by default
Configuring zero field check on RIPng packets
Some fields in the RIPng packet must be zero, which are called “zero fields”. With zero field check on
RIPng packets enabled, if such a field contains a non-zero value, the entire RIPng packet will be
discarded. If you are sure that all packets are reliable, disable the zero field check to reduce the CPU
processing time.
To configure RIPng zero field check:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter RIPng view.
ripng [ process-id ]
N/A
3.
Enable the zero field check.
checkzero
Optional
Enabled by default
Configuring the maximum number of equal cost routes for load
balancing
To configure the maximum number of equal cost RIPng routes for load balancing:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter RIPng view.
ripng [ process-id ]
N/A
3.
Configure the maximum
number of equal cost RIPng
routes for load balancing.
maximum load-balancing number
Optional
Applying IPsec policies for RIPng
To protect routing information and defend attacks, RIPng supports using an IPsec policy to authenticate
protocol packets.
Outbound RIPng packets carry the Security Parameter Index (SPI) defined in the relevant IPsec policy. A
router uses the SPI carried in a received packet to match against the configured IPsec policy. If they match,
the router accepts the packet; otherwise, it discards the packet and will not establish a neighbor
relationship with the sending router.
- H3C SR6600-X H3C SR6600 H3C WX6000 Series Access Controllers H3C WX5000 Series Access Controllers H3C WX3000 Series Unified Switches H3C LSWM1WCM10 Access Controller Module H3C LSWM1WCM20 Access Controller Module H3C LSQM1WCMB0 Access Controller Module H3C LSRM1WCM2A1 Access Controller Module H3C LSBM1WCM2A0 Access Controller Module