Peer Ipsec-Profile - HP 5920 Series Command Reference Manual

Usage guidelines
IMPORTANT:
Ignoring the ORIGINATOR_ID attribute might introduce routing loops to the network. Do not use this
command to ignore the ORIGINATOR_ID attribute if you are not sure there are no routing loops.
By default, BGP drops incoming route updates whose ORIGINATOR_ID attribute is the same as the local
router ID. Some networks such as firewall networks require BGP to accept such route updates. To meet the
requirement, you must configure BGP to ignore the ORIGINATOR_ID attribute.
After you execute this command, BGP also ignores the CLUSTER_LIST attribute.
Examples
# In BGP view, configure BGP to ignore the ORIGINATOR_ID attribute in BGP route updates from the
peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 ignore-originatorid
# In BGP VPN instance view, configure BGP to ignore the ORIGINATOR_ID attribute in BGP route
updates from the peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 ignore-originatorid

peer ipsec-profile

Use peer ipsec-profile to apply an IPsec profile to an IPv6 BGP peer or peer group.
Use undo peer ipsec-profile to remove the profile from the IPv6 BGP peer or peer group.
Syntax
peer { group-name | ipv6-address } ipsec-profile profile-name
undo peer { group-name | ipv6-address } ipsec-profile
Default
No IPsec profile is configured for any IPv6 BGP peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer
group must have been created.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
profile-name: Specifies an IPsec profile by its name, a case-sensitive string of 1 to 63 characters.
364