Configuring Bgp Gtsm - Huawei S6700 Series Configuration Manual

S6700 Series Ethernet Switches
Configuration Guide - IP Routing
Step 2 Run:
bgp as-number
The BGP view is displayed.
Step 3 Run:
peer { ipv4-address | group-name } password { cipher cipher-password | simple
simple-password }
An MD5 authentication password is set.
An MD5 authentication password can be set either in cipher or plain text.
l cipher cipher-password indicates that a password is recorded in cipher text. This means that
l simple simple-password indicates that a password is recorded in plain text. This means that
----End

7.18.3 Configuring BGP GTSM

The GTSM function protects devices by checking whether the TTL value in the IP header is
within a pre-defined range.
Procedure
l
Issue 01 (2012-03-15)
a password is encrypted using a special algorithm and then recorded in a configuration file.
a password is directly recorded in a configuration file.
NOTE
The peer password command run in the BGP view is also applicable to the BGP-VPNv4 address family
view, because both BGP and BGP-VPNv4 use the same TCP connection.
An MD5 password cannot both start and end with symbols $@$@ because these symbols are used to
identify types of old and new passwords during an upgrade.
Adjust GTSM.
Perform the following steps on two devices that establish a BGP peer relationship:
1. Run:
system-view
The system view is displayed.
2. Run:
bgp as-number
The BGP view is displayed.
3. Run:
peer { group-name | ipv4-address } valid-ttl-hops [ hops ]
BGP GTSM is configured.
The valid TTL range of a checked packet is [255 - hops + 1, 255]. For example, the
hops value is 1 for an EBGP direct route. This means that the valid TTL of the EBGP
direct routes is 255. By default, the hops value is 255. This means that the valid TTL
range is [ 1, 255 ].
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
7 BGP Configuration
440