Step
2.
Enter BGP instance view or
BGP-VPN instance view.
3.
Enable 4-byte AS number
suppression.
Enabling MD5 authentication for BGP peers
MD5 authentication provides the following benefits:
•
Peer authentication ensures that only BGP peers that have the same password can establish
TCP connections.
•
Integrity check ensures that BGP packets exchanged between peers are intact.
To enable MD5 authentication for BGP peers (IPv4 unicast/multicast address family):
Step
1.
Enter system view.
2.
Enter BGP instance view or
BGP-VPN instance view.
3.
Enable MD5 authentication
for a BGP peer group or
peer.
To enable MD5 authentication for BGP peers (IPv6 unicast address family):
Step
1.
Enter system view.
Command
•
Enter BGP instance view:
bgp as-number [ instance
instance-name
[ multi-session-thread ]
•
Enter
BGP-VPN
view:
a. bgp
as-number
[
instance-name
[ multi-session-thread ]
b. ip
vpn-instance
vpn-instance-name
peer { group-name | ipv6-address
[
prefix-length
capability-advertise
suppress-4-byte-as
Command
system-view
•
Enter BGP instance view:
bgp as-number [ instance
instance-name
[ multi-session-thread ]
•
Enter
BGP-VPN
view:
a. bgp
as-number
[
instance-name
[ multi-session-thread ]
b. ip
vpn-instance
vpn-instance-name
peer { group-name | ipv4-address
[ mask-length ] } password
{ cipher | simple } password
Command
system-view
263
Remarks
]
instance
N/A
instance
]
]
}
By default, 4-byte AS number
suppression is disabled.
Remarks
N/A
]
instance
N/A
instance
]
By default, MD5 authentication is
disabled.
Remarks
N/A