3Com 3C13636 Configuration Manual page 674

3Com Router 3000 Ethernet Family
Configuration Guide
Restore to use the optimal source
interface for route updates
By default, BGP employs the optimal source interface for route updates.
XIV. Enabling/disabling a peer/peer group
A BGP speaker does not exchange routing information with a disabled peer or peer
group.
Table 6-16 Enable/disable a peer/peer group
Enable a peer/peer group
Disable a peer/peer group
By default, a peer or peer group is enabled.
XV. Enabling MD5 authentication for BGP
TCP connections are necessary for BGP peers/peer groups. To improve BGP security,
you can configure BGP to perform MD5 authentication before setting up a TCP
connection. A TCP connection will not be set up unless the authentication succeeds.
The MD5 authentication does not authenticate BGP packets; it only sets an MD5
authentication password for the TCP connection. The authentication is carried out by
TCP.
Table 6-17 Enable MD5 authentication for BGP
Enable MD5 authentication for a BGP
peer (group)
Disable MD5 authentication
By default, MD5 authentication is disabled.
The MD5 authentication command can be configured in either BGP view or MBGP
VPN-instance address family view. When configured in the BGP view, this command is
also in effect for MBGP multicast expansion and MBGP VPN expansion because all of
them share the same TCP connection.
Operation
Operation
Operation
3Com Corporation
6-9
Chapter 6 BGP Configuration
Command
undo peer {
peer-address } connect-interface
interface-type interface-number
Command
peer { group-name | peer-address }
enable
undo peer {
peer-address } enable
Command
peer { group-name | peer-address }
password { cipher | simple } password
undo peer {
peer-address } password
group-name |
group-name |
group-name |