Enabling MD5 authentication for BGP peers
MD5 authentication provides the following benefits:
Peer authentication ensures that only BGP peers that have the same password can establish TCP connections.
Integrity check ensures that BGP packets exchanged between peers are intact.
To enable MD5 authentication for BGP peers (IPv4 unicast/multicast address family):
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter BGP instance view or BGP-VPN instance view. |
| N/A |
3. Enable MD5 authentication for a BGP peer group or peer. | peer { group-name | ipv4-address [ mask-length ] } password { cipher | simple } password | By default, MD5 authentication is disabled. |
To enable MD5 authentication for BGP peers (IPv6 unicast/multicast address family):
Step | Command | Remarks |
---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter BGP instance view or BGP-VPN instance view. |
| N/A |
3. Enable MD5 authentication for a BGP peer group or peer. | peer { group-name | ipv6-address [ prefix-length ] } password { cipher | simple } password | By default, MD5 authentication is disabled. |