Enabling Md5 Authentication For Bgp Peers - HP VSR1000 Configuration Manual

Virtual services router
Table of Contents

Advertisement

Step
3.
Enable 4-byte AS number
suppression.
To enable 4-byte AS number suppression (IPv6 unicast/multicast address family):
Step
Enter system view.
1.
2.
Enter BGP view or BGP-VPN
instance view.
3.
Enable 4-byte AS number
suppression.

Enabling MD5 authentication for BGP peers

MD5 authentication provides the following benefits:
Peer authentication makes sure that only BGP peers that have the same password can establish TCP
connections.
Integrity check makes sure that BGP packets exchanged between peers are intact.
To enable MD5 authentication for BGP peers (IPv4 unicast/multicast address family):
Step
1.
Enter system view.
2.
Enter BGP view or BGP-VPN
instance view.
3.
Enable MD5 authentication
for a BGP peer group or peer.
To enable MD5 authentication for BGP peers (IPv6 unicast/multicast address family):
Step
1.
Enter system view.
Command
peer { group-name | ip-address }
capability-advertise
suppress-4-byte-as
Command
system-view
Enter BGP view:
bgp as-number
Enter BGP-VPN instance view:
a.
bgp as-number
b.
ip vpn-instance
vpn-instance-name
peer { group-name |
ipv6-address } capability-advertise
suppress-4-byte-as
Command
system-view
Enter BGP view:
bgp as-number
Enter BGP-VPN instance view:
a.
bgp as-number
b.
ip vpn-instance
vpn-instance-name
peer { group-name | ip-address }
password { cipher | simple }
password
Command
system-view
244
Remarks
By default, 4-byte AS number
suppression is not enabled.
Remarks
N/A
N/A
By default, 4-byte AS number
suppression is not enabled.
Remarks
N/A
Use either method.
By default, MD5 authentication is
disabled.
Remarks
N/A

Hide quick links:

Advertisement

Table of Contents
loading

Table of Contents