To do...
Use the command...
Remarks
Enter global configuration context
configuration
Enter BGP context
bgp
as-number
Specify the source interface for
establishing TCP connections to a
neighbor.
neighbor {
ip-address
}
update-source {
ip-address
}
Required. By default, BGP uses the
outbound interface of the best route
to the BGP peer as the source
interface for establishing a TCP
connection to the peer.
Establishing MD5 authentication for TCP connections
BGP requires TCP as the transport protocol. To enhance security, you can configure BGP to perform MD5
authentication when establishing a TCP connection. The two parties must have the same password configured to
establish TCP connections. BGP MD5 authentication is not for BGP packets, but for TCP connections. If the
authentication fails, no TCP connection can be established.
To do...
Use the command...
Remarks
Enter system view
system-view
Enter BGP view
bgp
as-number
Enable MD5 authentication when
establishing a TCP connection to
the peer/peer group
peer [[
group-name
] | [
ip-
address
]] password
[[cipher] | [simple]]
password
Optional. Not enabled by default.
Allowing establishment of an eBGP connection to a non-directly connected peer
In general, direct physical links should be available between eBGP peers. If not, you can use the
neighbor ip-
address ebgp-multihop
command to establish a TCP connection over multiple hops between two peers.
Follow these steps to allow establishment of eBGP connection to a non-directly connected peer.
To do...
Use the command...
Remarks
Enter global configuration context
configuration
Enter BGP context
bgp
as-number
Allow the establishment of eBGP
connection to a non-directly
connected peer
neighbor
ip-address
ebgp-
multihop [
hop-count
]
Optional.
hop-count
is 1 by default
for eBGP peers
Controlling route distribution, reception and advertisement
Prerequisites
Before configuring this task, you should have completed the BGP basic configuration.
Chapter 17 Border Gateway Protocol (BGP)
381
