The vlink-peer command creates and configures a virtual link.
The undo vlink-peer command deletes the existing virtual link.
By default, OSPFv3 virtual links are not configured.
vlink-peer neighbor-id [ hello hello-interval | retransmit retransmit-interval | trans-delay trans-delay-interval | dead dead-interval | authentication-mode { hmac-sha256 key-id key-id { plain plain-text | [ cipher ] cipher-text } | keychain keychain-name } | instance instance-id ] *
undo vlink-peer neighbor-id [ hello [ hello-interval ] | retransmit [ retransmit-interval ] | trans-delay [ trans-delay-interval ] | dead [ dead-interval ] | authentication-mode { hmac-sha256 key-id key-id | keychain } ] *
| Parameter | Description | Value |
|---|---|---|
| neighbor-id | Specifies the router ID of a virtual link neighbor, in the IPv4 address format. | It is in dotted decimal notation. |
| hello hello-interval | Specifies the interval at which an interface sends Hello packets. This value must be equal to the hello-interval of the router that sets up the sham link with the local router. | The value is an integer ranging from 1 to 65535, in seconds. By default, it is 10 seconds. |
| retransmit retransmit-interval | Specifies the interval at which an interface retransmits LSAs. | The value is an integer ranging from 1 to 3600, in seconds. By default, it is 5 seconds. |
| trans-delay trans-delay-interval | Specifies the delay in which an interface sends LSAs. | The value is an integer ranging from 1 to 800 seconds. By default, it is 1 second. |
| dead dead-interval | Specifies the dead interval. This value must be equal to the dead-interval of the router that sets up a sham link with the local router and at least four times the value of hello-interval. | The value is an integer ranging from 1 to 65535, in seconds. By default, it is 40 seconds. |
| authentication-mode | Indicates the authentication mode over the virtual link. | N/A |
| hmac-sha256 | Sets the HMAC-SHA256 authentication mode. | N/A |
| key-id key-id | Specifies the key ID for authentication, which must be the same as the one configured at the other end. | The value is an integer ranging from 1 to 255. |
| plain | Configures the simple password type. Only a simple password
can be entered, and the password is displayed in explicittext in the
configuration file. NOTE:
When configuring an authentication
password, select the ciphertext mode because the password is saved
in configuration files in explicittext if you select plain mode, which
has a high risk. To ensure device security, change the password periodically. |
- |
| plain-text | Specifies a plain password. | The value is a string of 1 to 255 characters. |
| cipher | Configures the ciphertext password type. You can enter either a password in simpletext mode or ciphertext mode, but the password is displayed in ciphertext in the configuration file. | - |
| cipher-text | Specifies a ciphertext password. | The value can be a string of 1 to 255 characters for explicit passwords and 20 to 392 characters for ciphertext passwords. |
| keychain | Configures keychain authentication. NOTE:
Before you configure keychain authentication, run the keychain command to configure a keychain, the key-id command to configure a key ID, the key-string command to configure a password, and the algorithm command to configure an algorithm. If these commands are not run, OSPFv3 authentication fails. OSPFv3 supports only hmac-sha256. |
- |
| keychain-name | Specifies a keychain name. | The value is a string of 1 to 47 case-insensitive characters. Except the question mark (?) and space. However, when double quotation marks (") are used around the string, spaces are allowed in the string. |
| instance instance-id | Specifies the instance ID of the virtual link. | The value is an integer ranging from 0 to 255. By default, it is 0. |
You can use the vlink-peer command to set up a logical connection in a discontinuous backbone area or a non-backbone area which is not connected to the backbone area directly.
The virtual link can be regarded as a common OSPFv3 interface, because the principles of hello, retransmit, and trans-delay that are configured on the virtual link are similar to those on an OSPFv3 interface.
To improve OSPFv3 network security, run the authentication-mode command.