Allied Telesis VERSION 5.4.3-2.6, BGP4 manual Configuring BGP Authentication

BGP and BGP4+ Configuration

Configuring BGP Authentication

BGP authentication allows users to receive selected routing information, enhancing security of their network traffic. When BGP authentication is enabled on a peer, the peer verifies routing packet it receives by exchanging a password that is configured on both the sending and the receiving peers.

In this example, both Peer 1 and Peer 2 have manager as the password. Configure the same password on all routers that are to communicate using BGP in a network.

AS200	AS300
10.10.10.10	10.10.10.11
Peer 1	Peer 2
	bgp_6

Peer 1

awplus(config)#	Enter the Global Configuration mode.
configure terminal
awplus(config-router)#	Define the BGP routing process. The number 200
router bgp 200
	specifies the AS number of Peer 1.
awplus(config-router)#	Define BGP neighbors and establish a TCP session.
neighbor 10.10.10.11 remote-as 200
	10.10.10.11 is the IP address of the neighbor (Peer 2)
	and 200 is the neighbor’s AS number.
awplus(config-router)#	Specify the encryption type and the password.
neighbor 10.10.10.11 password 1
manager

Peer 2

	awplus(config)#	Enter the Global Configuration mode.
	configure terminal
	awplus(config-router)#	Define the BGP routing process.
	router bgp 200
		The number 200 specifies the AS number of Peer 2.
	awplus(config-router)#	Define BGP neighbors and establish a TCP session.
neighbor 10.10.10.10 remote-as 200
		10.10.10.10 is the IP address of the neighbor (Peer 1)
		and 200 is the neighbor’s AS number.
	awplus(config-router)#	Specify the encryption type and the password.
neighbor 10.10.10.10 password 1
	manager
	Software Reference Supplement for SwitchBlade® x8112, x908, x900 and x610 Series Switches
C613-50032-01 REV D	AlliedWare PlusTM Operating System - Software Version 5.4.3-2.6		2.11