PurposeCommand or Action
Sets the BGP origin-AS validation parameters.Use one of these commands.
Step 3
• disable—Use disable option to disable RPKI origin-AS
validation.
•
bgp origin-as validation disable
•
bgp origin-as validation time {off |
prefix_validation_time
• time—Use time option to either set prefix validation time (in
seconds) or to set off the automatic prefix validation after an
RPKI update.
Example:
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation disable
Range for prefix validation time is 5 to 60 seconds.
Configuring the disable option disables prefix validation for all
eBGP paths and all eBGP paths are marked as "valid" by default.
Or
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation time 50
The bgp origin-as validation options can also configured
in neighbor and neighbor address family submodes.
The neighbor must be an eBGP neighbor. If configured
at the neighbor or neighor address family level, prefix
validation disable or time options will be valid only for
that specific neighbor or neighbor address family.
Note
Or
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validation time off
Enables the iBGP signaling of validity state through an
extended-community.
bgp origin-as validation signal ibgp
Example:
RP/0/RSP0/CPU0:router(config-bgp)#bgp
origin-as validity signal ibgp
Step 4
This can also be configured in global address family submode.
commit
Step 5
Configuring RPKI Bestpath Computation
Perform this task to configure RPKI bestpath computation options.
SUMMARY STEPS
1.
configure
2.
router bgp as-number
3.
bgp bestpath origin-as use validity
4.
bgp bestpath origin-as allow invalid
5.
commit
DETAILED STEPS
PurposeCommand or Action
configure
Step 1
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide, Release 5.3.x
70
Implementing BGP
BGP Prefix Origin Validation Based on RPKI
To Next Page
Loading...
Need help?
General
