Users Guide

remote-as 100
no shutdown
!
template bgppg
fall-over
remote-as 102
!
Configure password
You can enable message digest 5 (MD5) authentication with a password on the TCP connection between two BGP neighbors.
Configure the same password on both BGP peers. When you configure MD5 authentication between two BGP peers, each segment of
the TCP connection is verified and the MD5 digest is checked on every segment sent on the TCP connection. Configuring a password for
a neighbor establishes a new connection.
NOTE:
You can secure the VTEP neighbor communications as well using the MD5 authentication.
Configure password
• Configure the password in both the BGP peers in ROUTER-NEIGHBOR CONFIGURATION or ROUTER-TEMPLATE
CONFIGURATION mode. The password provided in ROUTER-NEIGHBOR mode takes preference over the password in ROUTER-
TEMPLATE mode. Enter the password either as plain text or in encrypted format.
• password {9 encrypted password–string|password-string}
View password configuration
• show configuration
Peer 1 in ROUTER-NEIGHBOR mode
OS10# configure terminal
OS10(config)# interface ethernet 1/1/5
OS10(conf-if-eth1/1/5)# no switchport
OS10(conf-if-eth1/1/5)# ip address 11.1.1.1/24
OS10(conf-if-eth1/1/5)# router bgp 10
OS10(config-router-bgp-10)# neighbor 11.1.1.2
OS10(config-router-neighbor)# no shutdown
OS10(config-router-neighbor)# remote-as 10
OS10(config-router-neighbor)# password abcdell
Peer 1 in ROUTER-TEMPLATE mode
OS10# configure terminal
OS10(config)# interface ethernet 1/1/5
OS10(conf-if-eth1/1/5)# no switchport
OS10(conf-if-eth1/1/5)# ip address 11.1.1.1/24
OS10(conf-if-eth1/1/5)# router bgp 10
OS10(config-router-bgp-10)# template pass
OS10(config-router-template)# password 9
f785498c228f365898c0efdc2f476b4b27c47d972c3cd8cd9b91f518c14ee42d
OS10(config-router-template)# exit
OS10(config-router-bgp-10)# neighbor 11.1.1.2
OS10(config-router-neighbor)# inherit template pass
View password configuration in peer 1
OS10(config-router-neighbor)# show configuration
!
neighbor 11.1.1.2
password 9 0fbe1ad397712f74f4df903b4ff4b7b6e22cc377180432d7523a70d403d41565
remote-as 10
no shutdown
OS10(config-router-neighbor)# do show running-configuration bgp
!
router bgp 10
!
template pass
528
Layer 3