Step
1.
Enter system view.
2.
Configure an IPsec transform
set and a manual IPsec
profile.
3.
Enter BGP view or BGP-VPN
instance view.
Apply the IPsec profile to an
4.
IPv6 BGP peer or peer group.
Disabling BGP to establish a session to a peer or peer group
This task enables you to temporarily tear down the BGP session to a specific peer or peer group so that
you can perform network upgrade and maintenance without needing to delete and reconfigure the peer
or peer group. To recover the session, execute the undo peer ignore command.
To disable BGP to establish a session to a peer or peer group (IPv4):
Step
1.
Enter system view.
2.
Enter BGP view or BGP-VPN
instance view.
3.
Disable BGP to establish a
session to a peer or peer
group.
To disable BGP to establish a session to a peer or peer group (IPv6):
Step
1.
Enter system view.
2.
Enter BGP view or BGP-VPN
instance view.
Command
system-view
See Security Configuration Guide.
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance view:
a.
bgp as-number
b.
ip vpn-instance
vpn-instance-name
peer { group-name |
ipv6-address } ipsec-profile
profile-name
Command
system-view
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance view:
a.
bgp as-number
b.
ip vpn-instance
vpn-instance-name
peer { group-name | ip-address }
ignore
Command
system-view
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance view:
a.
bgp as-number
b.
ip vpn-instance
vpn-instance-name
237
Remarks
N/A
By default, no IPsec transform set or
manual IPsec profile exists.
Use either method.
By default, no IPsec profile is
configured for any IPv6 BGP peer
or peer group.
This command supports only IPsec
profiles in manual mode.
Remarks
N/A
N/A
By default, BGP can establish a
session to a peer or peer group.
Remarks
N/A
N/A