Enabling Quick Reestablishment Of Direct Ebgp Session; Enabling Md5 Authentication For Bgp Peers - HPE FlexNetwork HSR6800 Configuration Manual

Step
Enter BGP view or
2.
BGP-VPN instance view.
Enable 4-byte AS number
3.
suppression.

Enabling quick reestablishment of direct EBGP session

When the link to a directly connected EBGP peer is down, the router, with quick EBGP session
reestablishment enabled, tears down the session to the peer, and then reestablishes a session
immediately. If the function is not enabled, the router does not tear down the session until the
holdtime times out. A route flap does not affect the EBGP session state when the quick EBGP
session reestablishment is disabled.
To enable quick reestablishment of direct EBGP session:
Step
Enter system view.
1.
Enter BGP view or
2.
BGP-VPN instance view.
Enable quick
3.
reestablishment of direct
EBGP session.

Enabling MD5 authentication for BGP peers

You can enable MD5 authentication to enhance security in the following ways:
•
Perform MD5 authentication when establishing TCP connections. Only the two parties that
have the same password configured can establish TCP connections.
•
Perform MD5 calculation on TCP packets to avoid modification to the encapsulated BGP
packets.
To enable MD5 authentication for BGP peers:
Step
Enter system view.
1.
Command
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance
view:
a. bgp as-number
b. ipv4-family
vpn-instance
vpn-instance-name
peer { group-name | ip-address }
capability-advertise
suppress-4-byte-as
Command
system-view
•
Enter BGP view:
bgp as-number
•
Enter BGP-VPN instance
view:
a. bgp as-number
b. ipv4-family
vpn-instance
vpn-instance-name
ebgp-interface-sensitive
Command
system-view
222
Remarks
Use either method.
Disabled by default.
Remarks
N/A
Use either method.
Optional.
Not enabled by default.
Remarks
N/A