Configuring Rpki Bestpath Computation - Cisco ASR 9000 Series Configuration Manual
Aggregation services router
Hide thumbs
Also See for ASR 9000 Series:
- Command reference manual (1138 pages) ,
- Routing configuration manual (702 pages) ,
- Reference manual (696 pages)
Table of Contents
Advertisement
BGP Prefix Origin Validation Based on RPKI
Command or Action
Step 2
router bgp as-number
Example:
RP/0/RSP0/CPU0:router(config)#router bgp
100
Step 3
Use one of these commands.
• bgp origin-as validation disable
• bgp origin-as validation time {off |
prefix_validation_time
Example:
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation disable
Or
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation time 50
Or
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation time off
Step 4
bgp origin-as validation signal ibgp
Example:
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validity signal ibgp
Step 5
commit
Configuring RPKI Bestpath Computation
Perform this task to configure RPKI bestpath computation options.
SUMMARY STEPS
1. configure
2. router bgp as-number
3. bgp bestpath origin-as use validity
4. bgp bestpath origin-as allow invalid
5. commit
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.1.x
68
Purpose
Specifies the BGP AS number and enters the BGP configuration mode,
allowing you to configure the BGP routing process.
Sets the BGP origin-AS validation parameters.
• disable—Use disable option to disable RPKI origin-AS
validation.
• time—Use time option to either set prefix validation time (in
seconds) or to set off the automatic prefix validation after an
RPKI update.
Range for prefix validation time is 5 to 60 seconds.
Configuring the disable option disables prefix validation for all
eBGP paths and all eBGP paths are marked as "valid" by default.
The bgp origin-as validation options can also configured
Note
in neighbor and neighbor address family submodes.
The neighbor must be an eBGP neighbor. If configured
at the neighbor or neighor address family level, prefix
validation disable or time options will be valid only for
that specific neighbor or neighbor address family.
Enables the iBGP signaling of validity state through an
extended-community.
This can also be configured in global address family submode.
Implementing BGP
OL-30423-03
Advertisement
Table of Contents
