Configuring RSVP Message Authentication

RSVP message authentication is disabled by default. This authentication method uses MD5 and is configured within the MPLS configuration mode.

To configure RSVP message authentication, complete the following steps.

  1. Configure the device.
    device# configure
  2. Enable the MPLS router.
    device(config)# router mpls
  3. Enable MPLS-capable interfaces and specify selected ethernet interface.
    device(config-router-mpls)# mpls-interface ethernet 0/1
    In this example, the ethernet interface selected is 0/1.
  4. Enable RSVP parameters.
    device(config-router-mpls-eth-0/1)# rsvp
  5. RSVP authentication is available.
    device(config-router-mpls-eth-0/1-rsvp)# 
  6. Enable authentication.

    The prefix can be one of the following:

    • 0 = the key string is not encrypted and is in clear text.

    • 1 = the key string uses proprietary simple cryptographic 2-way algorithm.

    • 2 = the key string uses proprietary base64 cryptographic 2-way algorithm.

    device(config-router-mpls-eth-0/1-rsvp)# authentication key 0 administrator
    In this example, the rsvp authentication is an MD5 key named 'administrator'.

The following example shows an authentication method using MD5.

device# configure
device(config)# router mpls
device(config-router-mpls)# mpls-interface ethernet 0/1
device(config-router-mpls-eth-0/1)# rsvp
device(config-router-mpls-eth-0/1-rsvp)# authentication key 0 administrator