interface (Protocols RIFT)
Syntax
interface interface-name { allowed-authentication-keys (value | [set of values]); bfd-liveness-detection { minimum-interval milliseconds; multiplier milliseconds; } (check-common-instance-name | no-check-instance-name); (check-common-subnet | no-check-common-subnet); disable; lie-authentication; lie-origination-key; lie-transmit-address; lie-transmit-port port-number; metric metric; mode (active | advertise-subnets); (relax-three-way-nonce-check | no-relax-three-way-nonce-check); tie-receive-port port-number; }
Hierarchy Level
[edit protocols rift]
Description
Configure the interfaces for the RIFT protocol.
Options
interface-name | Name of the interface on which the RIFT protocol should be configured. |
||||||||
allowed-authentication-keys (value | [set of values]) | (Optional) Specify a single or set of values for allowed interface authentication keys (outer keys). This allows you to set a set of key IDs that are allowed on this interface as outer security keys.
|
||||||||
bfd-liveness-detection | (Optional) Configure Bidirectional Forwarding Detection (BFD) options. The BFD session is automatically brought up if it is configured on both sides of the session.
|
||||||||
check-common-instance-name | (Optional) Enable check for common instance name advertised by neighboring device. When multiple routing-instances of RIFT are running using the |
||||||||
check-common-subnet | (Optional) Enable check for a common subnet on the neighboring device. |
||||||||
disable | (Optional) Disable the RIFT protocol on the specified interface. |
||||||||
lie-authentication (loose | none | permissive | strict) | (Optional) Specify the method to authenticate received LIEs (outer fingerprint).
|
||||||||
lie-origination-key lie-origination-key | (Optional) Configure the key ID used to protect sent LIEs (outer key). You can configure to set the key used to authenticate LIEs, if required.
|
||||||||
lie-transmit-address | (Optional) Configure the IPv4 or IPv6 IP address on which the link information elements (LIEs) should be sent. See lie-transmit-address for more information. |
||||||||
lie-transmit-port port-number | (Optional) Port on which the link information elements (LIEs) should be transmitted.
|
||||||||
metric | (Optional) Specify the advertised cost of the RIFT protocol interface.
|
||||||||
mode | (Optional) Specify the mode of RIFT protocol interface.
|
||||||||
no-check-common-instance-name | (Optional) Disable check for common instance name advertised by neighboring device. |
||||||||
no-check-common-subnet | (Optional) Disable check for a common subnet on the neighboring device. |
||||||||
no-relax-three-way-nonce-check | (Optional) Reject LIEs with undefined remote and local nonce in three-way. |
||||||||
relax-three-way-nonce-check | (Optional) Accept LIEs with undefined remote and local nonce in three-way. This allows relaxation of the specification to accept undefined nonces in three-way state that allows for faster link bring-up after failures, but opens a security attack possibility (reseting adjacencies through replays). Note:
For maximum performance, the For maximum security when |
||||||||
tie-receive-port port-number | (Optional) Port on which the topology information elements (TIEs) should be received.
|
Required Privilege Level
routing—To view this statement in the configuration.
routing-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 19.4R1.