R3303-HP HSR6800 Routers Layer 3 - IP Routing Configuration Guide

210
Ste
p
Command Remarks
2. Enter BGP view or BGP-VPN
instance view.
• Enter BGP view:
bgp as-number
• Enter BGP-VPN instance view:
a. bgp as-number
b. ipv4 family vpn-instance
vpn-instance-name
Use either method.
3. Create a BGP peer group.
group group-name [ external |
internal ]
By default, no BGP peer group
exists on the device.
Deleting a BGP peer group also
deletes the BGP dynamic peers in
the group.
4. Specify an AS number for the
BGP peer group.
peer group-name as-number
as-number
Optional for an IBGP peer group
and required for an EBGP peer
group.
By default, no AS number is
specified for the BGP peer group.
If you configure an EBGP peer
group, you must specify an AS
number for the peer group before
you can configure the
listen-range command.
5. Configure MD5
authentication for the BGP
peer group.
peer group-name password { cipher
| simple } password
By default, MD5 authentication is
not configured for the BGP peer
group.
To prevent illegal neighbors from
attacking the device, HP
recommends that you configure
BGP MD5 authentication for the
BGP peer group to which the
dynamic peers belong.
6. Enable BGP to accept
connection requests from the
specified subnet and to add
dynamic peers into the
specified peer group.
listen-range ip-address mask-length
group group-name
By default, no BGP dynamic peer
exists.
After BGP adds a dynamic peer
to the peer group, the peer gets
all the configuration of the peer
group, and you cannot configure
the dynamic peer.
A BGP peer cannot be both a
dynamic peer and a static peer.
After a device is configured as a
static BGP peer, the device
cannot become a dynamic peer,
and vice versa.
Specifying the source interface for TCP connections
By default, BGP uses the output interface of the optimal route to a peer or peer group as the source
interface for establishing TCP connections to the peer or peer group, and it uses the primary IP address