Tcp Md5 Authentication For Bgp Example; Configuring Bgp Peer Groups; Ibgp Peer Group Example - Enterasys Security Router X-PeditionTM User Manual

XSR(config-router)#neighbor 130.32.32.1 remote-as 37
In a BGP speaker in AS 2, configure the peers from AS's 1 and 3 as special EBGP peers. Node
191.169.57.1 is a standard IBGP peer and 131.21.12.2 is a standard EBGP peer from AS 30.
XSR(config)#router bgp 2
XSR(config-router)#bgp confederation identifier 20
XSR(config-router)#bgp confederation peers 1 3
XSR(config-router)#neighbor 191.169.57.1 remote-as 2
XSR(config-router)#neighbor 192.168.57.7 remote-as 1
XSR(config-router)#neighbor 192.168.57.6 remote-as 3
XSR(config-router)#neighbor 132.21.12.2 remote-as 30
In a BGP speaker in AS 3, specify the peers from AS's 1 and 2 as special EBGP peers. Node
132.123.31.20 is a standard EBGP peer from AS 53.
XSR(config)#router bgp 3
XSR(config-router)#bgp confederation identifier 20
XSR(config-router)#bgp confederation peers 1 2
XSR(config-router)#neighbor 192.168.57.7 remote-as 1
XSR(config-router)#neighbor 192.168.57.5 remote-as 2
XSR(config-router)#neighbor 132.123.31.20 remote-as 53
The following example is a partial configuration from BGP speaker 132.123.31.23 from AS 53.
Neighbor 192.168.57.5 is set up as a normal EBGP speaker from AS 45. Interior division of the AS
into multiple AS's is unknown to peers outside the confederation.
XSR(config)#router bgp 53
XSR(config)#neighbor 192.168.57.5 remote-as 45
XSR(config-router)# 132.123.31.23 remote-as 53

TCP MD5 Authentication for BGP Example

The following example configures the XSR and its BGP peer at 192.168.57.5 perform MD5
authentication on their TCP link:
XSR(config)#router bgp 99
XSR(config-router)#neighbor 192.168.57.5 password 7&%kdeuj

Configuring BGP Peer Groups

This section details IBGP and an EBGP peer group examples.

IBGP Peer Group Example

Peer group IBGP comprises IBGP neighbors in this example. An IBGP peer group is stipulated by
definition because the same AS is set by the
AS 15). All peer group members share loopback 0 as the update source and route-map 3 as the
outbound route-map. Also, except for the neighbor at address 192.168.57.5, all the neighbors have
filter-list 2 as the inbound filter list.
XSR(config)#router bgp 15
XSR(config-router)#neighbor IBGP peer-group
XSR(config-router)#neighbor IBGP remote-as 15
XSR(config-router)#neighbor IBGP update-source loopback 0
XSR(config-router)#neighbor IBGP route-map 3 out
router bgp neighbor remote-as
and
Configuring BGP Peer Groups
commands,
XSR User's Guide 6-25