Enabling Md5 Authentication For Tcp Connections; Configuring Bgp Load Balancing - H3C LS-3100-52P-OVS-H3 Operation Manual

S5500-ei series ethernet switches
Table of Contents

Advertisement

With quick eBGP connection reestablishment enabled, the router, when the link to a directly connected
eBGP peer is down, will reestablish a session to the eBGP peer immediately.
Follow these steps to enable quick eBGP session reestablishment:
Enter system view
Enter BGP view
Enable quick eBGP session
reestablishment

Enabling MD5 Authentication for TCP Connections

BGP employs TCP as the transport protocol. To enhance security, you can configure BGP to perform
MD5 authentication when establishing a TCP connection. The two parties must have the same
password configured to establish TCP connections. BGP MD5 authentication is not for BGP packets,
but for TCP connections. If the authentication fails, no TCP connection can be established.
Follow these steps to enable MD5 authentication for TCP connections:
Enter system view
Enter BGP view
Enable MD5 authentication when
establishing a TCP connection to the
peer/peer group

Configuring BGP Load Balancing

If multiple paths to a destination exist, you can configure load balancing over such paths to improve link
utilization.
Follow these steps to configure BGP load balancing:
Enter system view
Enter BGP view
Configure the maximum number of
BGP routes for load balancing
To do...
To do...
To do...
Use the command...
system-view
bgp as-number
ebgp-interface-sensitive
Use the command...
system-view
bgp as-number
peer { group-name |
ip-address } password
{ cipher | simple } password
Use the command...
system-view
bgp as-number
balance number
1-34
Remarks
Optional
Not enabled by default
Remarks
Optional
Not enabled by default
Remarks
Optional
Load balancing is not
enabled by default.

Advertisement

Chapters

Table of Contents
loading

Table of Contents