华为设备配置RSVP认证

配置IP地址
[LSR1-GigabitEthernet0/0/0]ip add 20.1.1.1 24
[LSR1-LoopBack0]ip add 1.1.1.1 32
[LSR2-GigabitEthernet0/0/0]ip add 20.1.1.2 24
[LSR2-GigabitEthernet0/0/1]ip add 20.2.1.2 24
[LSR2-LoopBack0]ip add 2.2.2.2 32
[LSR3-GigabitEthernet0/0/0]ip add 20.2.1.3 24
[LSR3-LoopBack0]ip add 3.3.3.3 32

配置OSPF
[LSR1]ospf 1
[LSR1-ospf-1]area 0
[LSR1-ospf-1-area-0.0.0.0]network 20.1.1.0 0.0.0.255
[LSR1-ospf-1-area-0.0.0.0]network 1.1.1.1 0.0.0.0
[LSR2]ospf 1
[LSR2-ospf-1]area 0
[LSR2-ospf-1-area-0.0.0.0]network 2.2.2.2 0.0.0.0
[LSR2-ospf-1-area-0.0.0.0]network 20.1.1.0 0.0.0.255
[LSR2-ospf-1-area-0.0.0.0]network 20.2.1.0 0.0.0.255
[LSR3]ospf 1
[LSR3-ospf-1]area 0
[LSR3-ospf-1-area-0.0.0.0]network 3.3.3.3 0.0.0.0
[LSR3-ospf-1-area-0.0.0.0]network 20.2.1.0 0.0.0.255

配置MPLS基本能力，使能MPLS TE、MPLS RSVP-TE, 在主隧道的入节点上使能CSPF
[LSR1]mpls lsr-id 1.1.1.1
[LSR1]mpls
[LSR1-mpls]mpls te
[LSR1-mpls]mpls te cspf
[LSR1-mpls]mpls rsvp-te
[LSR1-mpls]q
[LSR1-GigabitEthernet0/0/0]mpls
[LSR1-GigabitEthernet0/0/0]mpls te
[LSR1-GigabitEthernet0/0/0]mpls rsvp-te
[LSR2]mpls lsr-id 2.2.2.2
[LSR2]mpls
[LSR2-mpls]mpls te
[LSR2-mpls]mpls rsvp-te
[LSR2-GigabitEthernet0/0/0]mpls
[LSR2-GigabitEthernet0/0/0]mpls te
[LSR2-GigabitEthernet0/0/0]mpls rsvp-te
[LSR2-GigabitEthernet0/0/1]mpls
[LSR2-GigabitEthernet0/0/1]mpls te
[LSR2-GigabitEthernet0/0/1]mpls rsvp-te
[LSR3]mpls lsr-id 3.3.3.3
[LSR3]mpls
[LSR3-mpls]mpls te
[LSR3-mpls]mpls rsvp-te
[LSR3-GigabitEthernet0/0/0]mpls
[LSR3-GigabitEthernet0/0/0]mpls te
[LSR3-GigabitEthernet0/0/0]mpls rsvp-te

配置OSPF TE
[LSR1]ospf 1
[LSR1-ospf-1]opaque-capability enable
[LSR1-ospf-1]area 0
[LSR1-ospf-1-area-0.0.0.0]mpls-te enable
[LSR2]ospf 1
[LSR2-ospf-1]opaque-capability enable
[LSR2-ospf-1]area 0
[LSR2-ospf-1-area-0.0.0.0]mpls-te enable
[LSR3]ospf 1
[LSR3-ospf-1]opaque-capability enable
[LSR3-ospf-1]area 0
[LSR3-ospf-1-area-0.0.0.0]mpls-te enable

在入节点创建MPLS TE Tunnel
[LSR1]interface Tunnel 0/0/1
[LSR1-Tunnel0/0/1]ip address unnumbered interface LoopBack 0
[LSR1-Tunnel0/0/1]tunnel-protocol mpls te
[LSR1-Tunnel0/0/1]destination 3.3.3.3
[LSR1-Tunnel0/0/1]mpls te tunnel-id 101
[LSR1-Tunnel0/0/1]mpls te commit

在LSR1、LSR2的MPLS TE链路的接口上配置RSVP验证
[LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication cipher abc@1234
[LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication handshake abc@1234
[LSR1-GigabitEthernet0/0/0]mpls rsvp-te authentication window-size 32
[LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication cipher abc@1234
[LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication handshake abc@1234
[LSR2-GigabitEthernet0/0/0]mpls rsvp-te authentication window-size 32

验证配置