Cisco NCS 5500 Series - Page 104

DETAILED STEPS
Step 1
configure
Step 2
router bgp as-number
Example:
RP/0/RP0/CPU0:router(config)#router bgp 100
Specifies the BGP AS number and enters the BGP configuration mode, allowing you to configure the BGP routing
process.
Step 3
Use one of these commands.
•
rpki origin-as validation disable
•
rpki origin-as validation time {off | prefix_validation_time
Example:
RP/0/RP0/CPU0:router(config-bgp)#rpki origin-as validation disable
Or
RP/0/RP0/CPU0:router(config-bgp)#rpki origin-as validation time 50
Or
RP/0/RP0/CPU0:router(config-bgp)#rpki origin-as validation time off
Sets the BGP origin-AS validation parameters.
• disable—Use disable option to disable RPKI origin-AS validation.
• time—Use time option to either set prefix validation time (in seconds) or to set off the automatic prefix validation
after an RPKI update.
Range for prefix validation time is 5 to 60 seconds.
Configuring the disable option disables prefix validation for all eBGP paths and all eBGP paths are marked as
"valid" by default.
The rpki origin-as validation options can also configured in neighbor and neighbor address family submodes.
The neighbor must be an ebgp neighbor. If configured at the neighbor or neighor address family level,
prefix validation disable or time options will be valid only for that specific neighbor or neighbor address
family.
Note
Step 4
origin-as validity signal ibgp
Example:
RP/0/RP0/CPU0:router(config-bgp)#rpki origin-as validity signal ibgp
Enables the iBGP signaling of validity state through an extended-community.
This can also be configured in global address family submode.
Step 5
commit
BGP Configuration Guide for Cisco NCS 5500 Series Routers, IOS XR Release 6.2.x
94
Implementing BGP
BGP Prefix Origin Validation Based on RPKI