HP VPN Firewall Appliances Network Management Configuration Guide

495
Ste
p
Command Remarks
3. Specify a fake AS
number for a peer or
peer group.
peer { group-name | ip-address }
fake-as as-number
Optional.
Not specified by default.
This command is only applicable to
an EBGP peer or peer group.
4. Configuring AS number substitution
Use AS number substitution only in the specific scenario. Improper configuration can result in
routing loops.
To configure AS number substitution for a peer or peer group:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view or BGP-VPN
instance view.
• Enter BGP view:
bgp as-number
• Enter BGP-VPN instance view:
a. bgp as-number
b. ipv4-family vpn-instance
vpn-instance-name
Use either method.
3. Replace the AS number of a
peer or peer group in the
AS_PATH attribute as the local
AS number.
peer { group-name | ip-address }
substitute-as
Not configured by
default.
5. Removing private AS numbers from updates to a peer or peer group
Private AS numbers are typically used in test networks, and need not be transmitted in public
networks. The range of private AS numbers is from 64512 to 65535.
To remove private AS numbers from updates to a peer or peer group:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view or BGP-VPN
instance view.
• Enter BGP view:
bgp as-number
• Enter BGP-VPN instance view:
a. bgp as-number
b. ipv4-family vpn-instance
vpn-instance-name
Use either method.
3. Configure BGP to remove
private AS numbers from the
AS_PATH attribute of
updates to a peer or peer
group.
peer { group-name | ip-address }
public-as-only
By default, BGP updates
carry private AS numbers.
6. Ignoring the first AS number of EBGP route updates
Typically, BGP checks the AS_PATH attribute of a route update received from a peer. If the first AS
number is not that of the BGP peer, the BGP router discards the route update.