Step 2
Run:
bgp
as-number
The BGP view is displayed.
Step 3
Run:
peer
{
ipv4-address
|
group-name
}
password
{
cipher
cipher-password
|
simple
simple-password
}
An MD5 authentication password is set.
An MD5 authentication password can be set either in cipher or plain text.
l
cipher
cipher-password
indicates that a password is recorded in cipher text. This means that
a password is encrypted using a special algorithm and then recorded in a configuration file.
l
simple
simple-password
indicates that a password is recorded in plain text. This means that
a password is directly recorded in a configuration file.
NOTE
The
peer password
command run in the BGP view is also applicable to the BGP-VPNv4 address family
view, because both BGP and BGP-VPNv4 use the same TCP connection.
An MD5 password cannot both start and end with symbols $@$@ because these symbols are used to
identify types of old and new passwords during an upgrade.
----End
7.18.3 Configuring BGP GTSM
The GTSM function protects devices by checking whether the TTL value in the IP header is
within a pre-defined range.
Procedure
l
Adjust GTSM.
Perform the following steps on two devices that establish a BGP peer relationship:
1.
Run:
system-view
The system view is displayed.
2.
Run:
bgp
as-number
The BGP view is displayed.
3.
Run:
peer
{
group-name
|
ipv4-address
}
valid-ttl-hops
[
hops
]
BGP GTSM is configured.
The valid TTL range of a checked packet is [255 - hops + 1, 255]. For example, the
hops
value is 1 for an EBGP direct route. This means that the valid TTL of the EBGP
direct routes is 255. By default, the
hops
value is 255. This means that the valid TTL
range is [ 1, 255 ].
S6700 Series Ethernet Switches
Configuration Guide - IP Routing
7 BGP Configuration
Issue 01 (2012-03-15)
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
440
