
292
[RouterB] bgp 65008
[RouterB-bgp] router-id 2.2.2.2
[RouterB-bgp] group ibgp internal
[RouterB-bgp] peer 1::1 group ibgp
[RouterB-bgp] address-family ipv6 unicast
[RouterB-bgp-ipv6] peer ibgp enable
[RouterB-bgp-ipv6] quit
3.
Establish an EBGP connection between Router B and Router C:
# Configure Router C.
<RouterC> system-view
[RouterC] bgp 65009
[RouterC-bgp] router-id 3.3.3.3
[RouterC-bgp] group ebgp external
[RouterC-bgp] peer 3::1 as-number 65008
[RouterC-bgp] peer 3::1 group ebgp
[RouterC-bgp] address-family ipv6 unicast
[RouterC-bgp-ipv6] peer ebgp enable
[RouterC-bgp-ipv6] quit
[RouterC-bgp] quit
# Configure Router B.
[RouterB-bgp] group ebgp external
[RouterB-bgp] peer 3::2 as-number 65009
[RouterB-bgp] peer 3::2 group ebgp
[RouterB-bgp] address-family ipv6 unicast
[RouterB-bgp-ipv6] peer ebgp enable
[RouterB-bgp-ipv6] quit
[RouterB-bgp] quit
4.
Configure IPsec transform sets and IPsec profiles:
# On Router A, create an IPsec transform set named
tran1
, and set the encapsulation mode to
transport mode, the security protocol to ESP, the encryption algorithm to DES, and authentication
algorithm to SHA1. Create an IPsec profile named
policy001
, specify the manual mode for it,
reference IPsec transform set
tran1
, and set the SPIs of the inbound and outbound SAs to
12345
and the keys for the inbound and outbound SAs using ESP to
abcdefg
.
[RouterA] ipsec transform-set tran1
[RouterA-ipsec-transform-set-tran1] encapsulation-mode transport
[RouterA-ipsec-transform-set-tran1] esp encryption-algorithm des
[RouterA-ipsec-transform-set-tran1] esp authentication-algorithm sha1
[RouterA-ipsec-transform-set-tran1] quit
[RouterA] ipsec profile policy001 manual
[RouterA-ipsec-profile-policy001-manual] transform-set tran1
[RouterA-ipsec-profile-policy001-manual] sa spi outbound esp 12345
[RouterA-ipsec-profile-policy001-manual] sa spi inbound esp 12345
[RouterA-ipsec-profile-policy001-manual] sa string-key outbound esp simple abcdefg
[RouterA-ipsec-profile-policy001-manual] sa string-key inbound esp simple abcdefg
[RouterA-ipsec-profile-policy001-manual] quit
# On Router B, create an IPsec transform set named
tran1
, and set the encapsulation mode to
transport mode, the security protocol to ESP, the encryption algorithm to DES, and authentication