6-60
Description
Use the
peer password
command to configure BGP to perform MD5 authentication when a TCP
connection is being established with a peer/peer group.
Use the
undo peer password
command to disable the function.
By default, no MD5 authentication is performed for TCP connection establishment.
Once MD5 authentication is enabled, both parties must be configured with the same authentication
mode and password. Otherwise, the TCP connection will not be set up.
Examples
# In BGP view, perform MD5 authentication on the TCP connection set up between the local router
10.1.100.1 and the peer router 10.1.100.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 10.1.100.2 password simple aabbcc
# Perform the similar configuration on the peer.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 10.1.100.1 password simple aabbcc
# In BGP-VPN instance view, perform MD5 authentication on the TCP connection set up between the
local router 10.1.100.1 and the peer router 10.1.100.2(the VPN has been created).
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ipv4-family vpn-instance vpn1
[Sysname-bgp-vpn1] peer 10.1.100.2 password simple aabbcc
# Perform the similar configuration on the peer.
<Sysname> system-view
[Sysname] bgp 200
[Sysname-bgp-vpn1] peer 10.1.100.1 password simple aabbcc
peer preferred-value (BGP/BGP-VPN instance view)
Syntax
peer
{
group-name | ip-address
}
preferred-value
value
undo
peer
{
group-name | ip-address
}
preferred-value
View
BGP view, BGP-VPN instance view
Default Level
2: System level
Parameters
group-name
: Name of a peer group, a string of 1 to 47 characters.
ip-address
: IP address of a peer.
value
: Preferred value, in the range 0 to 65535.
