R3166-R3206-HP High-End Firewalls Network Management Configuration Guide-6PW101

362
# Configure Firewall.
[Firewall] bgp 65008
[Firewall-bgp] balance 2
[Firewall-bgp] quit
4. Verify the configuration
# Display the BGP routing table on Firewall.
[Firewall] display bgp routing-table
Total Number of Routes: 3
BGP Local router ID is 1.1.1.1
Status codes: * - valid, > - best, d - damped,
h - history, i - internal, s - suppressed, S - Stale
Origin : i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
*> 8.1.1.0/24 0.0.0.0 0 0 i
*> 9.1.1.0/24 3.1.1.1 0 0 65009i
*> 3.1.2.1 0 0 65009i
• The output shows two valid routes to the destination 9.1.1.0/24, and both of them are marked with
a greater-than sign (>), indicating they are the best routes.
• Using the display ip routing-table command, you can find two routes to 9.1.1.0/24: one with next
hop 3.1.1.1 and outbound interface GE0/0, the other with next hop 3.1.2.1 and outbound interface
GE0/1.
BGP community configuration example
Network requirements
As shown in Figure 185, Router B establishes eBGP connections with Firewall and Router A. Configure
No_Export community attribute on Firewall to make routes from AS 10 not advertised by AS 20 to any
other AS.
Figure 185 Network diagram for BGP community configuration
Configuration procedure
1. Configure IP addresses for interfaces (omitted).