HP VPN Firewall Appliances Network Management Configuration Guide

831
[Firewall-bgp-af-ipv6] peer 101::2 as-number 200
[Firewall-bgp-af-ipv6] peer 102::2 as-number 200
# Configure Router C.
<RouterC> system-view
[RouterC] ipv6
[RouterC] bgp 200
[RouterC-bgp] router-id 4.4.4.4
[RouterC-bgp] ipv6-family
[RouterC-bgp-af-ipv6] peer 102::1 as-number 200
3. Configure Firewall as a route reflector, and configure Router B and Router C as its clients.
[Firewall-bgp-af-ipv6] peer 101::2 reflect-client
[Firewall-bgp-af-ipv6] peer 102::2 reflect-client
4. Verify the configuration:
Execute the display bgp ipv6 routing-table command on Router B and Router C. Both have learned
the network 1::/64.
IPv6 BGP IPsec policy configuration example
Network requirements
• In Figure 401, configure IPv6 BGP on the devices. Router A and Router B establish an IBGP
relationship. Router B and Firewall establish an EBGP relationship.
• Configure IPsec policies on the devices to authenticate and encrypt protocol packets.
Figure 401 Network diagram
Configuration procedure
1. Configure IPv6 addresses for interfaces. (Details not shown.)
2. Configure the IBGP connection:
# Configure Router A.
<RouterA> system-view
[RouterA] ipv6
[RouterA] bgp 65008
[RouterA-bgp] router-id 1.1.1.1
[RouterA-bgp] ipv6-family
[RouterA-bgp-af-ipv6] group ibgp internal
[RouterA-bgp-af-ipv6] peer 1::2 group ibgp
[RouterA-bgp-af-ipv6] quit
[RouterA-bgp] quit
# Configure Router B.
<RouterB> system-view
[RouterB] ipv6