3com 3031 Instruccion De Instalación
BGP Configuration
549
created TCP connection with the peer. The interface specified in this configuration
is generally a Loopback interface.
is generally a Loopback interface.
By default, BGP carries out TCP connection with the optimal source interface.
Enabling/Disabling a peer (group)
The BGP speakers do not exchange routing information with the disable peer or
peer group.
peer group.
By default, a peer or peer group is enabled.
Configuring MD5 authentication for BGP
TCP connections are necessary for BGP peers/peer groups. To improve BGP
security, you can configure MD5 authentication for setting up TCP connections. A
TCP connection will not be set up provided the authentication fails. MD5
authentication of BGP is not configured to authenticate BGP packets, but to set an
MD5 authentication password for the TCP connection. The authentication is
completed by TCP.
security, you can configure MD5 authentication for setting up TCP connections. A
TCP connection will not be set up provided the authentication fails. MD5
authentication of BGP is not configured to authenticate BGP packets, but to set an
MD5 authentication password for the TCP connection. The authentication is
completed by TCP.
By default, MD5 authentication is canceled during TCP connection setup.
MD5 authentication command can be configured in either BGP view or MBGP
VPN-instance address family view. With respect to BGP view, this command is also
valid for MBGP multicast expansion and MBGP VPN expansion because all of them
share the same TCP connection.
VPN-instance address family view. With respect to BGP view, this command is also
valid for MBGP multicast expansion and MBGP VPN expansion because all of them
share the same TCP connection.
Configuring BGP Timer
After BGP connection is created between peers, they periodically send Keepalive
Message to each other so as to avoid the routers regard the BGP connection has
been interrupted. .If a router does not receive any Keepalive Message or any kinds
of packets from the peer within the specified Holdtime, the BGP connection will
Message to each other so as to avoid the routers regard the BGP connection has
been interrupted. .If a router does not receive any Keepalive Message or any kinds
of packets from the peer within the specified Holdtime, the BGP connection will
Table 646 Specifying source interface for a route update packet
Operation
Command
Specify source interface for a route
update packet
update packet
peer { peer-address | group-name }
connect-interface interface-type
interface-number
connect-interface interface-type
interface-number
Restore to use the source interface
of the optimal route update packet
of the optimal route update packet
undo peer { peer-address | group-name }
connect-interface interface-type
interface-number
connect-interface interface-type
interface-number
Table 647 Enable/Disable a peer (group)
Operation
Command
Enable a peer (group)
peer { group-name | peer-address } enable
Disable a peer (group)
undo peer { group-name | peer-address } enable
Table 648 Configuring MD5 authentication for BGP
Operation
Command
Configure MD5 authentication
for BGP peers/peer groups
for BGP peers/peer groups
peer { group-name | peer-address } password
{ cipher | simple } password
{ cipher | simple } password
Cancel MD5 authentication
undo peer { group-name | peer-address }
password
password