H3C S5600 Series Operation Manual page 413

Operation Manual – Routing Protocol
H3C S5600 Series Ethernet Switches
the BGP route-refresh function. With route-refresh function enabled on all the routers,
if BGP routing policy changes, the local router sends refresh messages to its peers.
And the peers receiving the message in turn send their routing information to the local
router. Therefore, the local router can perform dynamic route update and apply the
new policy without tearing down BGP connections.
If a router not supporting route-refresh exists in the network, you can only reset BGP
connections with the refresh bgp command, resulting in temporary BGP
disconnections.
4) BGP authentication
BGP uses TCP as the transport layer protocol. To improve the security of BGP
connections, you can specify to perform MD5 authentication when a TCP connection
is established. Note that the MD5 authentication of BGP does not authenticate the
BGP packets. It only configures the MD5 authentication password for TCP connection,
and the authentication is performed by TCP. If authentication fails, the TCP
connection cannot be established.
5.6.1 Configuration Prerequisites
Before adjusting the BGP clock, enable basic BGP functions.
Before configuring BGP clock and authentication, make sure the following information
is available.
Value of BGP timer
Interval for sending the update packets
MD5 authentication password
5.6.2 Tuning and Optimizing a BGP Network
Follow these steps to tune and optimize a BGP network:
Enter system view
Enter BGP view
Configure
BGP timer
To do...
Configure the
Keepalive time
and Holdtime of
BGP.
Configure the
Keepalive time
and holdtime of a
specified
peer/peer group.
Use the command...
system-view
bgp as-number
timer keepalive
keepalive-interval
hold holdtime-interval
peer { group-name |
ip-address } timer
keepalive
keepalive-interval
hold holdtime-interval
5-29
Chapter 5 BGP Configuration
Remarks
—
—
Optional
By default, the keepalive
time is 60 seconds, and
holdtime is 180 seconds.
The priority of the timer
configured by the timer
command is lower than
that of the timer
configured by the peer
time command.