Process of Setting Up MSDP Peer Relationships

Setting Up MSDP Peer Relationships

MSDP peers use port 639 to set up TCP connections.

After MSDP is enabled on two devices and they are specified as MSDP peers to each other, the devices compare their IP addresses. The device with the smaller IP address starts the ConnectRetry timer and initiates a TCP connection to the other device. The device with the larger IP address monitors whether a TCP connection is set up on the port 639. The MSDP peer relationship is set up after a TCP connection is set up. MSDP peers maintain the TCP connection by exchanging Keepalive messages.

Figure 6-3 Process of setting up an MSDP peer relationship

As shown in Figure 6-3, an MSDP peer relationship is set up between RouterA and RouterB in a process as follows:

1. In initial state, the MSDP session status of the two routers are Down.
2. After MSDP is enabled and they are specified as MSDP peers to each other, the routers compare their IP addresses used to set up a TCP connection.
   • RouterA has a smaller IP address. Therefore, it enters the Connect state, initiates a TCP connection to RouterB, and starts the ConnectRetry timer. This timer determines the interval for retrying setting up the TCP connection.
   • RouterB has a larger IP address. Therefore, it enters the Listen state and waits for a connection initiated by the peer.
3. After a TCP connection is set up, the MSDP session status of the two ends become Up.
4. MSDP peers send Keepalive messages to each other to request the peer to maintain the MSDP connection status.

MSDP Authentication

To improve MSDP security, MSDP peers perform TCP connection authentication. You must configure the same encryption algorithm and password on the two ends of an MSDP peer relationship. Otherwise, the TCP connection cannot be set up between MSDP peers. MSDP supports two encryption modes: MD5 and Keychain. The two modes are mutually exclusive, and you can configure only one of them between MSDP peers.