HPE FlexNetwork 5510 HI Series User Manual

266
Step
Command
Remarks
view:
a. bgp as-number
[ instance
instance-name ]
b. ip vpn-instance
vpn-instance-name
3. Enable MD5 authentication
for a BGP peer group or
peer.
peer
{ group-name | ipv6-address
[ prefix-length ] }
password
{
cipher
|
simple
} password
By default, MD5 authentication is
disabled.
Enabling keychain authentication for BGP peers
Keychain authentication enhances the security of TCP connection establishment between BGP
peers. It allows BGP peers to establish TCP connections only when the following conditions are met:
• Keychain authentication is enabled on both BGP peers.
• The keys used by the BGP peers have the same authentication algorithm and key string.
Before configuring keychain authentication, make sure the specified keychain has been created.
For more information about keychains, see Security Configuration Guide.
To enable keychain authentication for BGP peers (IPv4 unicast/multicast address family):
Step
Command
Remarks
1. Enter system view.
system-view
N/A
2. Enter BGP instance view of
BGP-VPN instance view.
• Enter BGP instance view:
bgp as-number [ instance
instance-name ]
• Enter BGP-VPN instance
view:
a. bgp as-number
[ instance
instance-name ]
b. ip vpn-instance
vpn-instance-name
N/A
3. Enable keychain
authentication for a BGP
peer or peer group.
peer
{ group-name | ip-address
[ mask-length ] }
keychain
keychain-name
By default, keychain
authentication is disabled.
To enable keychain authentication for BGP peers (IPv6 unicast/multicast address family):
Step
Command
Remarks
1. Enter system view.
system-view
N/A

HPE FlexNetwork 5510 HI Series Specifications

General

Brand	HPE
Model	FlexNetwork 5510 HI Series
Category	Switch
Language	English