Brocade Communications Systems FastIron SX 800 Configuration Manual page 372

Basic configuration tasks required for BGP4
The show ip bgp route command verifies that the route has been unsuppressed.
device(config-bgp)# show ip bgp route 10.1.44.0/24
Number of BGP Routes matching display condition : 1
Status A:AGGREGATE B:BEST b:NOT-INSTALLED-BEST C:CONFED_EBGP D:DAMPED
E:EBGP H:HISTORY I:IBGP L:LOCAL M:MULTIPATH S:SUPPRESSED F:FILTERED
Prefix
1 10.1.44.0/24
AS_PATH:
Route is advertised to 1 peers:
10.1.0.2(4)
Encrypting BGP4 MD5 authentication keys
When you configure a BGP4 neighbor or neighbor peer group, you can specify an MD5 authentication string to authenticate packets
exchanged with the neighbor or peer group of neighbors.
For added security, by default, the software encrypts the display of the authentication string. The software also provides an optional
parameter to disable encryption of the authentication string, on an individual neighbor or peer group basis. By default, MD5
authentication strings are displayed in encrypted format in the output of the following commands:
• show running-config (or write terminal )
• show configuration
• show ip bgp config
When encryption of the authentication string is enabled, the string is encrypted in the CLI regardless of the access level you are using.
When you save the configuration to the startup configuration file, the file contains the new BGP4 command syntax and encrypted
passwords or strings.
NOTE
Brocade recommends that you save a copy of the startup configuration file for each device you plan to
upgrade.
Encryption example
The following commands configure a BGP4 neighbor and a peer group, and specify MD5 authentication strings (passwords) to
authenticate packets exchanged with the neighbor or peer group.
device(config-bgp)# local-as 2
device(config-bgp)# neighbor xyz peer-group
device(config-bgp)# neighbor xyz password abc
device(config-bgp)# neighbor 10.10.200.102 peer-group xyz
device(config-bgp)# neighbor 10.10.200.102 password test
The BGP4 configuration commands appear in the following format as a result of the show ip bgp configuration command.
device# show ip bgp configuration
Current BGP configuration:
router bgp
local-as 2
neighbor xyz peer-group
neighbor xyz password $b24tbw==
neighbor 10.10.200.102 peer-group xyz
neighbor 10.10.200.102 remote-as 1
neighbor 10.10.200.102 password $on-o
In this output, the software has converted the commands that specify an authentication string into the new syntax (described below), and
has encrypted display of the authentication strings.
372
Next Hop MED LocPrf
10.2.0.1 1 101
Weight Status
32768 BLS
FastIron Ethernet Switch Layer 3 Routing
53-1003627-04