3Com Switch 8800 Family Configuration Guide

Configuring BGP 371
interior BGP session can be configured to specify the source interface. This
command is usually used on the Loopback interface.
By default, BGP uses the interface to establish BGP links for the source interface of
a route update packet.
Configuring BGP MD5 authentication password
BGP uses TCP as its transport layer. For the sake of high security, you can configure
MD5 authentication password when setting up a TCP connection. In other words,
BGP MD5 authentication just sets password for TCP connection, but not for
authenticating BGP packets. The authentication is implemented by TCP.
Perform the following configuration in BGP view.
In BGP, no MD5 authentication is performed in setting up TCP connections by
default.
n
The multicast extension configured in BGP view is also available in MBGP, since
they use the same TCP link.
Configuring Route
Filtering of a Peer
(group)
Switch 8800 Family series support filtering imported and advertised routes for
peers (groups) through Route-policy, AS path list, ACL and ip prefix list.
The route filtering policy of advertised routes configured for each member of a
peer group must be same with that of the peer group but their route filtering
policies of ingress routes may be different.
Perform the following configuration in BGP view.
Configuring route policy for a peer (group)
Tab le 363 Specify the source interface of a route update packet
Operation Command
Specify the source interface of a
route update packet
peer { peer-address | group-name } connect-interface
interface-type interface-name
Use the best source interface
undo peer { peer-address | group-name }
connect-interface interface-type interface-name
Tab le 364 Configure BGP MD5 authentication
Operation Command
Configure MD5 authentication
password
peer { group-name | peer-address } password {
cipher | simple } password
Cancel MD5 authentication undo peer { group-name | peer-address } password
Tab le 365 Configure route policy for a peer (group)
Operation Command
Configure the ingress route policy for a peer
(group)
peer { group-name | peer-address }
route-policy route-policy-name import
Remove the ingress route policy of a peer
(group)
undo peer { group-name | peer-address }
route-policy policy-name import
Configure the egress route policy for a peer
group
peer group-name route-policy
route-policy-name export