Enabling Quick Ebgp Session Reestablishment; Enabling Md5 Authentication For Tcp Connections - HP MSR2000 series Configuration Manual

Step
2. Enter BGP view or
BGP-VPN view.
3. Set the DSCP value
for the BGP packets
sent to the specified
BGP peer or peer
group.

Enabling quick EBGP session reestablishment

If the router receives no keepalive messages from a BGP peer within the holdtime, it disconnects from the
peer.
With quick EBGP connection reestablishment enabled, the router will reestablish a session to the EBGP
peer immediately when the link to a directly connected EBGP peer is down.
To enable quick EBGP session reestablishment:
Step
1. Enter system view.
2. Enter BGP view.
3. Enable quick EBGP session
reestablishment.

Enabling MD5 authentication for TCP connections

BGP employs TCP as the transport protocol. To increase security, configure BGP to perform MD5
authentication when establishing a TCP connection. The two parties must have the same password
configured to establish TCP connections.
BGP MD5 authentication is not for BGP packets, but for TCP connections. If the authentication fails, no
TCP connection can be established.
To enable MD5 authentication for TCP connections:
Step
1. Enter system view.
2. Enter BGP view.
3. Enable MD5 authentication when
establishing a TCP connection to the
peer or peer group.
Command
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance view:
a. bgp as-number
b. ipv4-family vpn-instance
vpn-instance-name
peer { group-name | ip-address } dscp
dscp-value
Command
system-view
bgp as-number
ebgp-interface-sensitive
Command
system-view
bgp as-number
peer { group-name | ip-address }
password { cipher | simple }
password
218
Remarks
Use either approach.
Optional.
By default, the DSCP value in BGP
packets is 48.
Remarks
N/A
N/A
Optional.
Not enabled by default.
Remarks
N/A
N/A
Optional.
Not enabled by default.