Huawei Quidway NetEngine80E Configuration Manual page 825

HUAWEI NetEngine80E/40E Router
Configuration Guide - IP Routing
l
Issue 02 (2014-09-30)
– To filter routes based on a route-policy, run the peer { ipv4-address | group-
name } route-policy route-policy-name import command.
A peer group and its members can use different import policies when receiving routes.
This means that each member in a peer group can select its own policy to filter received
routes.
Limit the number of the routes received from a peer or peer group.
When the router running BGP is attacked or network configuration errors occur, the
router receives a large number of routes from its neighbor. As a result, a large number of
resources of the router are consumed. Therefore, the administrator must limit the resources
used by the router based on network planning and the capacity of the router. BGP provides
peer-based route control to limit the number of routes to be sent by a neighbor. Therefore,
the preceding problem is addressed.
1. Run:
system-view
The system view is displayed.
2. Run:
bgp { as-number-plain | as-number-dot }
The BGP view is displayed.
3. Run:
ipv4-family unicast
The IPv4 unicast address family view is displayed.
4. Run:
peer { group-name | ipv4-address } route-limit limit [ percentage ]
[ alert-only | idle-forever | idle-timeout times ]
The number of routes that can be received from a peer or peer group is set.
The command provides the limit on the number of received routes based on peers.
You can configure specific parameters as required to control BGP after the number
of the routes received from a peer exceeds the threshold.
– alert-only: The peer relationship is kept. No route is received after the number of
received routes exceeds the threshold, and an alarm is generated and recorded in
the log.
– idle-forever: The peer relationship is interrupted. The router does not retry setting
up a connection. An alarm is generated and recorded in the log. In this case, run
the display bgp peer [ verbose ] command, and you can find that the status of the
peer is Idle. To restore the BGP connection, run the reset bgp command.
– idle-timeout: The peer relationship is interrupted. The router retries setting up a
connection after the timer expires. An alarm is generated and recorded in the log.
In this case, run the display bgp peer [ verbose ] command, and you can find that
the status of the peer is Idle. To restore the BGP connection before the timer
expires, run the reset bgp command.
– If none of the preceding parameters is set, the peer relationship is disconnected.
The router retries setting up a connection after 30 seconds. An alarm is generated
and recorded in the log.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
8 BGP Configuration
800