Description

RSVP authentication fail counter is increasing even there is no issue on RSVP session and RSVP auth is enabled on interface:

 

router> show rsvp interface et-0/1/0.0 detail

et-0/1/0.0 Index 80, State Ena/Up

Authentication, Aggregate, Reliable, LinkProtection

HelloInterval 9(second)

Address 10.101.21.188

ActiveResv 11, PreemptionCnt 0, MaxResvTh 0bps, 0%

Update threshold 10.000%, UpdateThresholdValue 8Gbps

Subscription 80%, StaticBW 100Gbps, AvailableBW 80Gbps, Actual 80%

ReservedBW [0] 0bps[1] 0bps[2] 0bps[3] 0bps[4] 0bps[5] 0bps[6] 0bps[7] 0bps

Event Count

authentication fail 456 <<<<

 

set groups core-rsvp-interface protocols rsvp interface <*> authentication-key "xxxxxx"

set groups core-rsvp-interface protocols rsvp interface <*> subscription 80

set groups core-rsvp-interface protocols rsvp interface <*> link-protection

Symptoms

RSVP authentication fail counter is increasing even there is no issue on RSVP session and RSVP auth is enabled on interface:

 

router> show rsvp interface et-0/1/0.0 detail

et-0/1/0.0 Index 80, State Ena/Up

Authentication, Aggregate, Reliable, LinkProtection

HelloInterval 9(second)

Address 10.101.21.188

ActiveResv 11, PreemptionCnt 0, MaxResvTh 0bps, 0%

Update threshold 10.000%, UpdateThresholdValue 8Gbps

Subscription 80%, StaticBW 100Gbps, AvailableBW 80Gbps, Actual 80%

ReservedBW [0] 0bps[1] 0bps[2] 0bps[3] 0bps[4] 0bps[5] 0bps[6] 0bps[7] 0bps

Event Count

authentication fail 456 <<<<

 

set groups core-rsvp-interface protocols rsvp interface <*> authentication-key "xxxxxx"

set groups core-rsvp-interface protocols rsvp interface <*> subscription 80

set groups core-rsvp-interface protocols rsvp interface <*> link-protection

Solution

This is expected where RSVP link/node protection is enabled and not all RSVP interfaces are enabled RSVP auth.

 

With enabled RSVP link/node protection, the RSVP Hello remote/extension packet to detect when a neighboring node is not reachable. 

Please refer RFC 3209 RSVP Hello extension.

 

To authenticate packets between remote neighbours, then global rsvp authentication key can be configured.

 

 

Modification History

2024-04-24 : Article Created