HP 6125XLG R2306-HP 6125XLG Blade Switch High Availability Configuration Guide - Page 36

Setting the port shutdown mode, Configuring DLDP authentication

Page 36 highlights

Step 1. Enter system view. 2. Set the DelayDown timer. Command system-view dldp delaydown-timer time Remarks N/A The default is 1 second. The DelayDown timer setting applies to all DLDP-enabled ports. Setting the port shutdown mode On detecting a unidirectional link, the ports can be shut down in one of the following two modes. • Auto mode. In this mode, when a unidirectional link is detected, DLDP changes the DLDP port state to Unidirectional. The unidirectional port periodically sends RecoverProbe packets. When a correct RecoverEcho packet is received, the link between the local port and the neighbor is restored to a bidirectional link, and the port will transit from Unidirectional state to Bidirectional state. This process is called "link auto-recovery mechanism." • Manual mode. In this mode, when a unidirectional link is detected, DLDP does not shut down the port, and you need to manually shut it down. When the link state is restored to Bidirectional, you must manually bring up the port. If the network performance is low, the device is busy, or the CPU usage is high, use this mode to prevent normal links from being shut down because of false unidirectional link reports. On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is auto mode, the port will be shut down by DLDP when it receives a packet sent by itself, causing remote OAM loopback failure. To prevent this, set the port shutdown mode to manual mode. For more information about Ethernet OAM, see "Configuring Ethernet OAM." To set port shutdown mode: Step 1. Enter system view. 2. Set port shutdown mode. Command system-view dldp unidirectional-shutdown { auto | manual } Remarks N/A The default mode is auto. Configuring DLDP authentication You can guard your network against attacks and malicious probes by configuring an appropriate DLDP authentication mode, which can be plain text authentication or MD5 authentication. If your network is safe, you can choose not to authenticate. To configure DLDP authentication: Step 1. Enter system view. 2. Configure a DLDP authentication mode. Command Remarks system-view N/A dldp authentication-mode { md5 | The default authentication mode is none | simple } none. 31

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144

31
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set the DelayDown timer.
dldp delaydown-timer
time
The default is 1 second.
The DelayDown timer setting
applies to all DLDP-enabled ports.
Setting the port shutdown mode
On detecting a unidirectional link, the ports can be shut down in one of the following two modes.
Auto mode. In this mode, when a unidirectional link is detected, DLDP changes the DLDP port state
to Unidirectional. The unidirectional port periodically sends RecoverProbe packets. When a correct
RecoverEcho packet is received, the link between the local port and the neighbor is restored to a
bidirectional link, and the port will transit from Unidirectional state to Bidirectional state. This
process is called "link auto-recovery mechanism."
Manual mode. In this mode, when a unidirectional link is detected, DLDP does not shut down the
port, and you need to manually shut it down. When the link state is restored to Bidirectional, you
must manually bring up the port. If the network performance is low, the device is busy, or the CPU
usage is high, use this mode to prevent normal links from being shut down because of false
unidirectional link reports.
On a port with both remote OAM loopback and DLDP enabled, if the port shutdown mode is
auto
mode,
the port will be shut down by DLDP when it receives a packet sent by itself, causing remote OAM
loopback failure. To prevent this, set the port shutdown mode to manual mode. For more information
about Ethernet OAM, see "
Configuring Ethernet OAM
."
To set port shutdown mode:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Set port shutdown mode.
dldp unidirectional-shutdown
{
auto
|
manual
}
The default mode is
auto
.
Configuring DLDP authentication
You can guard your network against attacks and malicious probes by configuring an appropriate DLDP
authentication mode, which can be plain text authentication or MD5 authentication. If your network is
safe, you can choose not to authenticate.
To configure DLDP authentication:
Step
Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Configure a DLDP
authentication mode.
dldp authentication-mode
{
md5
|
none
|
simple
}
The default authentication mode is
none
.