R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

346
Follow these steps to enable MD5 authentication for TCP connections:
To do… Use the command…
Remarks
Enter system view system-view
—
Enter BGP view bgp as-number
—
Enable MD5 authentication when
establishing a TCP connection to the
peer/peer group
peer { group-name | ip-address }
password { cipher | simple } password
Optional
Not enabled by default
Configuring BGP load balancing
If multiple paths to a destination exist, you can configure load balancing over such paths to improve link
utilization.
Follow these steps to configure BGP load balancing:
To do… Use the command…
Remarks
Enter system view system-view
—
Enter BGP view bgp as-number
—
Configure the maximum number of
BGP routes for load balancing
balance number
Optional
Load balancing is not enabled by
default.
Forbidding session establishment with a peer or peer group
Follow these steps to forbid session establishment with a peer or peer group:
To do… Use the command…
Remarks
Enter system view system-view
—
Enter BGP view bgp as-number
—
Forbid session establishment with a peer
or peer group
peer { group-name | ip-address }
ignore
Optional
Not forbidden by default
Configuring a large scale BGP network
In a large-scale BGP network, configuration and maintenance become difficult due to large numbers of
BGP peers. To facilitate configuration in this case, you can configure peer group, community, route
reflector or confederation as needed.
Configuration prerequisites
Peering nodes are accessible to each other at the network layer.
Configuring BGP peer groups
A peer group is a group of peers with the same route selection policy.
In a large-scale network, many peers can use the same route selection policy. You can configure a peer
group and add these peers into this group. In this way, peers can share the same policy as the peer
group. When the policy of the group is modified, the modification also applies to peers in it, thus
simplifying configuration.