•
Perform MD5 authentication when establishing TCP connections. Only the two parties that
have the same password configured can establish TCP connections.
•
Perform MD5 calculation on TCP packets to avoid modification to the encapsulated BGP
packets.
To enable MD5 authentication for BGP peers:
Step
Enter system view.
1.
Enter BGP view or
2.
BGP-VPN instance view.
Enable MD5 authentication
3.
for BGP peers.
Configuring BGP load balancing
If multiple BGP routes that have the same AS_PATH, ORIGIN, LOCAL_PREF, and MED attributes to
a destination exist, you can use the balance command to configure the maximum number of BGP
routes for load balancing to improve link utilization.
To configure BGP load balancing:
Step
Enter system view.
1.
Enter BGP view or
2.
BGP-VPN instance view.
Configure the maximum
3.
number of BGP routes for
load balancing.
Forbidding session establishment with a peer or peer group
This task allows you to temporarily tear down the BGP session to a specific peer or peer group. To
recover the session, execute the undo peer ignore command. In this way, you can implement
network upgrade and maintenance without deleting and then configuring the peer or peer group.
To forbid session establishment with a peer or peer group:
Command
system-view
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance
view:
a. bgp as-number
b. ipv4-family
vpn-instance
vpn-instance-name
peer { group-name | ip-address }
password { cipher | simple }
password
Command
system-view
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance
view:
a. bgp as-number
b. ipv4-family
vpn-instance
vpn-instance-name
balance [ ebgp | ibgp ] number
208
Remarks
N/A
Use either approach.
Not enabled by default.
Remarks
N/A
Use either approach.
By default, load balancing is not
enabled.