Enabling Quick Ebgp Session Reestablishment; Enabling Md5 Authentication For Tcp Connections - H3C S5800 Series Configuration Manual

To do...
Enable the ORF capability for a
BGP peer/peer group
Table 6-2 Description of the both, send, and receive parameters and the negotiation result
Local parameter
send
receive
both

Enabling Quick eBGP Session Reestablishment

If the router receives no keepalive messages from a BGP peer within the holdtime, it disconnects from
the peer.
With quick eBGP connection reestablishment enabled, the router, when the link to a directly connected
eBGP peer is down, will reestablish a session to the eBGP peer immediately.
Follow these steps to enable quick eBGP session reestablishment:
Enter system view
Enter BGP view
Enable quick eBGP session
reestablishment

Enabling MD5 Authentication for TCP Connections

BGP employs TCP as the transport protocol. To enhance security, you can configure BGP to perform
MD5 authentication when establishing a TCP connection. The two parties must have the same
password configured to establish TCP connections. BGP MD5 authentication is not for BGP packets,
but for TCP connections. If the authentication fails, no TCP connection can be established.
Follow these steps to enable MD5 authentication for TCP connections:
peer { group-name | ip-address }
capability-advertise orf ip-prefix
{ both | receive | send }
Peer parameter
receive
both
send
both
both
To do...
Use the command...
The ORF sending capability is enabled locally and the
ORF receiving capability is enabled on the peer.
The ORF receiving capability is enabled locally and the
ORF sending capability is enabled on the peer.
Both the ORF sending and receiving capabilities are
enabled locally and on the peer, respectively.
Use the command...
system-view
bgp as-number
ebgp-interface-sensitive
6-38
Remarks
Required
Disabled by default.
Negotiation result
Remarks
—
—
Optional
Not enabled by default