interface (Protocols RIFT)
Syntax
interface interface-name {
allowed-authentication-keys (value | [set of values]);
bfd-liveness-detection {
minimum-interval milliseconds;
multiplier milliseconds;
}
(check-common-instance-name | no-check-instance-name);
(check-common-subnet | no-check-common-subnet);
disable;
lie-authentication;
lie-origination-key;
lie-transmit-address;
lie-transmit-port port-number;
metric metric;
mode (active | advertise-subnets);
(relax-three-way-nonce-check | no-relax-three-way-nonce-check);
tie-receive-port port-number;
}
Hierarchy Level
[edit protocols rift]
Description
Configure the interfaces for the RIFT protocol.
Options
| interface-name | Name of the interface on which the RIFT protocol should be configured. |
||||||||
| allowed-authentication-keys (value | [set of values]) | (Optional) Specify a single or set of values for allowed interface authentication keys (outer keys). This allows you to set a set of key IDs that are allowed on this interface as outer security keys.
|
||||||||
| bfd-liveness-detection | (Optional) Configure Bidirectional Forwarding Detection (BFD) options. The BFD session is automatically brought up if it is configured on both sides of the session.
|
||||||||
| check-common-instance-name | (Optional) Enable check for common instance name advertised by neighboring device. When multiple routing-instances of RIFT are running using the |
||||||||
| check-common-subnet | (Optional) Enable check for a common subnet on the neighboring device. |
||||||||
| disable | (Optional) Disable the RIFT protocol on the specified interface. |
||||||||
| lie-authentication (loose | none | permissive | strict) | (Optional) Specify the method to authenticate received LIEs (outer fingerprint).
|
||||||||
| lie-origination-key lie-origination-key | (Optional) Configure the key ID used to protect sent LIEs (outer key). You can configure to set the key used to authenticate LIEs, if required.
|
||||||||
| lie-transmit-address | (Optional) Configure the IPv4 or IPv6 IP address on which the link information elements (LIEs) should be sent. See lie-transmit-address for more information. |
||||||||
| lie-transmit-port port-number | (Optional) Port on which the link information elements (LIEs) should be transmitted.
|
||||||||
| metric | (Optional) Specify the advertised cost of the RIFT protocol interface.
|
||||||||
| mode | (Optional) Specify the mode of RIFT protocol interface.
|
||||||||
| no-check-common-instance-name | (Optional) Disable check for common instance name advertised by neighboring device. |
||||||||
| no-check-common-subnet | (Optional) Disable check for a common subnet on the neighboring device. |
||||||||
| no-relax-three-way-nonce-check | (Optional) Reject LIEs with undefined remote and local nonce in three-way. |
||||||||
| relax-three-way-nonce-check | (Optional) Accept LIEs with undefined remote and local nonce in three-way. This allows relaxation of the specification to accept undefined nonces in three-way state that allows for faster link bring-up after failures, but opens a security attack possibility (reseting adjacencies through replays). Note:
For maximum performance, the For maximum security when |
||||||||
| tie-receive-port port-number | (Optional) Port on which the topology information elements (TIEs) should be received.
|
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 19.4R1.