Brocade Multi-Service IronWare Routing Configuration Guide (Supporting R05.6.00) User Manual

Page 728

Advertising
background image

700

Multi-Service IronWare Routing Configuration Guide

53-1003033-02

Displaying OSPFv3 information

Displaying IPsec for a virtual link
To display IPsec for a virtual link, run the show ipv6 ospf virtual-link brief or show ipv6 ospf
virtual-link command, as the following examples illustrate.

Syntax: show ipv6 ospf virtual-link [brief]

The optional [brief] keyword limits the display to the Transit, Area ID, Router ID, Interface Address,
and State fields for each link.

Changing a key
In this example, the key is changed. Note that the SPI value is changed from 300 to 310 to comply
with the requirement that the SPI is changed when the key is changed.

Initial configuration command.

Brocade(config-if-e10000-1/3)#ipv6 ospf auth ipsec spi 300 esp sha1

no-encrypt 12345678900987655431234567890aabbccddef

Current

Shows current SPI, authentication algorithm (currently ESP only), encryption
algorithm (currently SHA1 only), and the current key.

New (Inbound or
Outbound)

Shows new SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the new key.

Old (Inbound or
Outbound)

Shows old SPI (if changed), authentication algorithm (currently ESP only),
encryption algorithm (currently SHA1 only), and the old key.

OSPF messages
dropped

Shows the number of packets dropped because the packets failed
authentication (for any reason).

TABLE 149

Area configuration of IPsec (Continued)

This field...

Displays...

Brocade#show ipv6 ospf virtual-link brief

Index Transit Area ID Router ID Interface Address State

1 1 10.14.14.14 2001:db8::1:1:1::1 P2P

Brocade#show ipv6 ospf virtual-link

Transit Area ID Router ID Interface Address State

1 10.14.14.14 2001:db8:1:1:1::1 P2P

Timer intervals(sec) :

Hello 10, Hello Jitter 10, Dead 40, Retransmit 5, TransmitDelay 1

DelayedLSAck: 5 times

Authentication: Configured

KeyRolloverTime(sec): Configured: 10 Current: 0

KeyRolloverState: NotActive

Outbound: SPI:100004, ESP, SHA1

Key:1234567890123456789012345678901234567890

Inbound: SPI:100004, ESP, SHA1

Key:1234567890123456789012345678901234567890

Statistics:

Type tx rx tx-byte rx-byte

Unknown 0 0 0 0

Hello 65 65 2600 2596

DbDesc 4 4 2752 2992

LSReq 1 1 232 64

LSUpdate 11 5 1040 1112

LSAck 5 8 560 448

OSPF messages dropped,no authentication: 0

Neighbor: State: Full Address: 2001:db8:44:44::4 Interface: eth 2/2

Advertising