- Table of Contents
-
- 06-Layer 3 - IP Routing Command Reference
- 00-Preface
- 01-Basic IP routing commands
- 02-Static routing commands
- 03-RIP commands
- 04-OSPF commands
- 05-IS-IS commands
- 06-BGP commands
- 07-Policy-based routing commands
- 08-IPv6 static routing commands
- 09-RIPng commands
- 10-OSPFv3 commands
- 11-IPv6 IS-IS commands
- 12-IPv6 policy-based routing commands
- 13-Routing policy commands
- Related Documents
-
Title | Size | Download |
---|---|---|
06-BGP commands | 516.05 KB |
bgp update-delay on-startup prefix-list
display bgp dampening parameter
display bgp non-stop-routing status
display bgp routing-table dampened
display bgp routing-table flap-info
display bgp routing-table ipv4 unicast
display bgp routing-table ipv6 unicast
display bgp routing-table ipv6 unicast inlabel
display bgp routing-table ipv6 unicast outlabel
graceful-restart timer purge-time
graceful-restart timer restart
graceful-restart timer wait-for-rib
peer as-number (for a BGP peer group)
peer as-number (for a BGP peer)
peer capability-advertise conventional
peer capability-advertise route-refresh
peer capability-advertise suppress-4-byte-as
router-id (BGP-VPN instance view)
BGP commands
address-family ipv4
Use address-family ipv4 to create the BGP IPv4 unicast address family, BGP-VPN IPv4 unicast address family, or BGP MDT address family view, and enter its view.
Use undo address-family ipv4 to remove the BGP IPv4 unicast address family, BGP-VPN IPv4 unicast address family, or BGP MDT address family view, and all the configurations of the specified address family.
Syntax
In BGP view:
address-family ipv4 [ mdt |unicast ]
undo address-family ipv4 [ mdt |unicast ]
In BGP-VPN instance view:
address-family ipv4 [ unicast ]
undo address-family ipv4 [ unicast ]
Default
The BGP IPv4 unicast address family, the BGP-VPN IPv4 unicast address family, or BGP MDT address family view is not created.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
unicast: Specifies the IPv4 unicast address family. If the command is executed with the unicast keyword in BGP view, it opens BGP IPv4 unicast address family view. If executed in BGP-VPN instance view, the command opens BGP-VPN IPv4 unicast address family view.
mdt: Specifies the IPv4 MDT address family.
Usage guidelines
Configurations made in BGP IPv4 unicast address family view apply only to the BGP IPv4 unicast routes and peers of the public network.
Configurations made in BGP-VPN IPv4 unicast address family view apply only to the BGP IPv4 unicast routes and peers of the specified VPN instance.
By default, the unicast keyword is used.
Examples
# In BGP view, create the BGP IPv4 unicast address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4]
# In BGP-VPN instance view, create the BGP-VPN IPv4 unicast address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1]
address-family ipv6
Use address-family ipv6 to create the BGP IPv6 unicast address family or BGP-VPN IPv6 unicast address family, and enter its view.
Use undo address-family ipv6 to remove the BGP IPv6 unicast address family or BGP-VPN IPv6 unicast address family, and all the configurations of the specified address family.
Syntax
In BGP view:
address-family ipv6 [ unicast ]
undo address-family ipv6 [ unicast ]
In BGP-VPN instance view:
address-family ipv6 [ unicast ]
undo address-family ipv6 [ unicast ]
Default
The BGP IPv6 unicast address family or BGP-VPN IPv6 unicast address family is not created.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
unicast: Specifies the IPv6 unicast address family. If the command is executed with the unicast keyword in BGP view, it opens BGP IPv6 unicast address family view. If executed in BGP-VPN instance view, the command opens BGP-VPN IPv6 unicast address family view.
Usage guidelines
Configurations made in BGP IPv6 unicast address family view apply only to the BGP IPv6 unicast routes and peers of the public network.
Configurations made in BGP-VPN IPv6 unicast address family view apply only to the BGP IPv6 unicast routes and peers of the specified VPN instance.
By default, the unicast keyword is used.
Examples
# In BGP view, create the BGP IPv6 unicast address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6]
# In BGP-VPN instance view, create the BGP-VPN IPv6 unicast address family and enter its view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1]
advertise-rib-active
Use advertise-rib-active to enable BGP to advertise only the optimal BGP routes in the IP routing table.
Use undo advertise-rib-active to restore the default.
Syntax
advertise-rib-active
undo advertise-rib-active
Default
BGP advertises optimal routes in the BGP routing table, regardless of whether they are optimal in the IP routing table.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
The advertise-rib-active command does not apply to the following routes:
· Routes redistributed by the import-route command.
· Routes advertised by the network command.
· Default routes redistributed by the default-route imported command.
· VPNv4 routes.
· VPNv6 routes.
This command applies only to the routes generated after you execute this command. To apply this command to all routes, use the reset bgp command to reset BGP sessions.
Examples
# Enable BGP to advertise optimal routes in the IP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] advertise-rib-active
aggregate
Use aggregate to create a summary route in the BGP routing table.
Use undo aggregate to remove a summary route.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view:
aggregate ip-address { mask | mask-length } [ as-set | attribute-policy route-policy-name | detail-suppressed | origin-policy route-policy-name | suppress-policy route-policy-name ] *
undo aggregate ip-address { mask | mask-length }
In BGP IPv6 unicast address family view:
aggregate ipv6-address prefix-length [ as-set | attribute-policy route-policy-name | detail-suppressed | origin-policy route-policy-name | suppress-policy route-policy-name ] *
undo aggregate ipv6-address prefix-length
No summary route is configured.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies a summary address.
mask: Specifies a mask for the summary address, in dotted decimal notation.
mask-length: Specifies a mask length for the summary address, in the range of 0 to 32.
ipv6-address: Specifies an IPv6 summary address.
prefix-length: Specifies a prefix length for the IPv6 summary address, in the range of 0 to 128.
as-set: Enables the AS_PATH attribute of the summary route to contain the AS path information for all summarized routes. The AS_PATH attribute is of the AS_SET type that requires no sequence when arranging AS numbers. If you do not specify this keyword, the AS_PATH attribute of the summary route contains only the AS number of the local router.
attribute-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to set attributes for the summary route.
detail-suppressed: Advertises only the summary route. If you do not specify this keyword, BGP advertises both the summary route and the more specific routes.
origin-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to select routes to be summarized.
suppress-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to filter more specific routes to be advertised. Routes permitted by the specified routing policy are not advertised. Routes denied by the specified routing policy are advertised.
Usage guidelines
This command creates a summary route. If the BGP routing table has routes whose destination addresses fall within the specified network, the summary route is added to the BGP routing table. For example, if two routes 10.1.1.0/24 and 10.1.2.0/24 exist in the BGP routing table, configuring the aggregate 10.1.0.0 16 command creates a summary route 10.1.0.0/16.
If the summarized routes have different ORIGIN attributes, the summary route selects the ORIGIN attribute in the sequence of INCOMPLETE, EGP, and IGP. For example, if the ORIGIN attributes of the summarized routes include INCOMPLETE and IGP, the ORIGIN attribute of the summary route is INCOMPLETE.
The COMMUNITY attribute of the summary route includes all the COMMUNITY (or extended community) attribute values if the routes have the following details:
· Summarized routes have different COMMUNITY (or extended community) attribute values.
· The summary route does not have the ATOMIC_AGGREGATE attribute.
Table 1 Functions of the keywords
Keywords |
Function |
as-set |
Enables the summary route to carry the AS path information for all summarized routes. This feature can help avoid routing loops. However, if many routes are summarized and are changed frequently, do not specify this keyword. This configuration causes the summary route to flap with the more specific routes. |
attribute-policy |
Sets attributes except the AS-PATH attribute for the summary route. The peer route-policy command can achieve the same purpose. |
detail-suppressed |
Disables advertisement of all more specific routes. To disable advertisement of some more specific routes, use the suppress-policy keyword or the peer filter-policy command. |
origin-policy |
Summarizes only routes matching a routing policy. If the destination address of a route falls within the summary network but does not match the routing policy, the route is not summarized. It is not controlled by the detail-suppressed and suppress-policy keywords. There is no need to configure apply clauses for the routing policy referenced by the origin-policy keyword because they do not take effect. |
suppress-policy |
Disables advertisement of some more specific routes filtered by a routing policy. The routing policy uses if-match clauses to filter routes. There is no need to configure apply clauses for the routing policy referenced by the suppress-policy keyword because they do not take effect. |
Examples
# In BGP IPv4 unicast address family view, create a summary route 1.1.0.0/16 in the BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] aggregate 1.1.0.0 255.255.0.0
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] aggregate 1.1.0.0 255.255.0.0 as-set detail-suppressed
# In BGP IPv4 unicast address family view, create a summary route 1.1.0.0/16 in the BGP routing table, and set the COMMUNITY attribute of the summary route to INTERNET.
<Sysname> system-view
[Sysname] route-policy commu permit node 0
[Sysname-route-policy-commu-0] apply community internet
[Sysname-route-policy-commu-0] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] aggregate 1.1.0.0 255.255.0.0 attribute-policy commu
# In BGP IPv4 unicast address family view, create a summary route 1.1.0.0/16 in the BGP routing table, and configure BGP to not summarize route 1.1.1.0/24.
<Sysname> system-view
[Sysname] ip prefix-list spert deny 1.1.1.0 24
[Sysname] ip prefix-list spert permit 0.0.0.0 0 less-equal 32
[Sysname] route-policy srcrt permit node 0
[Sysname-route-policy-srcrt-0] if-match ip address prefix-list spert
[Sysname-route-policy-srcrt-0] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] aggregate 1.1.0.0 255.255.0.0 origin-policy srcrt
# In BGP IPv4 unicast address family view, create a summary route 1.1.0.0/16 in the BGP routing table, and disable BGP to advertise the specific route 1.1.1.0/24.
<Sysname> system-view
[Sysname] ip prefix-list spert permit 1.1.1.0 24
[Sysname] ip prefix-list spert deny 0.0.0.0 0 less-equal 32
[Sysname] route-policy suprt permit node 0
[Sysname-route-policy-suprt-0] if-match ip address prefix-list spert
[Sysname-route-policy-suprt-0] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] aggregate 1.1.0.0 255.255.0.0 suppress-policy suprt
# In BGP-VPN IPv4 unicast address family view, create a summary route 1.1.0.0/16 in BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] aggregate 1.1.0.0 255.255.0.0
# In BGP IPv6 unicast address family view, create a summary route 12::/64 in the IPv6 BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6
[Sysname-bgp-ipv6] aggregate 12:: 64
Related commands
· display bgp routing-table ipv4 unicast
· display bgp routing-table ipv6 unicast
· summary automatic
balance
Use balance to enable load balancing and set the maximum number of BGP ECMP routes for load balancing.
Use undo balance to disable load balancing.
Syntax
balance [ ebgp | eibgp | ibgp ] number
undo balance [ ebgp | eibgp | ibgp ]
Default
Load balancing is not enabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
ebgp: Enables load balancing over EBGP routes.
eibgp: Enables load balancing between EBGP and IBGP routes.
ibgp: Enables load balancing over IBGP routes.
number: Sets the maximum number of BGP ECMP routes for load balancing. When it is set to 1, load balancing is disabled.
Usage guidelines
Unlike IGP, BGP has no explicit metric for making load balancing decision. Instead, it implements load balancing by modifying route selection rules. If multiple BGP routes destined for a network have the same AS_PATH, ORIGIN, LOCAL_PREF, and MED attributes, the device selects the specified number of routes for load balancing.
The value range for the number argument depends on the max-ecmp-num command. If you set the maximum number of ECMP routes to m by using the max-ecmp-num command and reboot the device, the number argument in the balance command is in the range of 1 to m.
If you do not provide the ibgp, eibgp, or ebgp keyword, this command enables load balancing over EBGP routes and IBGP routes, but not between EBGP and IBGP routes.
After you execute the balance eibgp number command, the balance [ ebgp | ibgp ] number and undo balance [ ebgp | ibgp ] commands cannot be executed; and vice versa.
Examples
# In BGP IPv4 unicast address family view, enable load balancing and set the maximum number of BGP ECMP routes used for load balancing to 2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] balance 2
# In BGP-VPN IPv6 unicast address family view, enable load balancing and set the maximum number of BGP ECMP routes for load balancing to 2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] balance 2
Related commands
max-ecmp-num
bestroute as-path-neglect
Use bestroute as-path-neglect to configure BGP to not consider the AS_PATH during optimal route selection.
Use undo bestroute as-path-neglect to configure BGP to consider the AS_PATH during optimal route selection.
Syntax
bestroute as-path-neglect
undo bestroute as-path-neglect
Default
BGP considers the AS_PATH during optimal route selection.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Examples
# In BGP IPv4 unicast address family view, ignore AS_PATH in route selection.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] bestroute as-path-neglect
# In BGP-VPN IPv6 unicast address family view, ignore AS_PATH in route selection.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] bestroute as-path-neglect
bestroute compare-med
Use bestroute compare-med to enable MED comparison for routes on a per-AS basis.
Use undo bestroute compare-med to restore the default.
Syntax
bestroute compare-med
undo bestroute compare-med
Default
MED comparison for routes on a per-AS basis is disabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
By default, BGP does not compare MEDs for routes from the same AS. When a router learns a new route, it compares the route with the optimal route in its BGP routing table. If the new route is more optimal, it becomes the optimal route in the BGP routing table. In this way, route learning sequence might affect optimal route selection.
To solve the selection problem, the router puts routes received from the same AS into a group when the bestroute compare-med command is configured. The router then selects the route with the lowest MED from the same group, and compares routes from different groups.
Examples
# In BGP IPv4 unicast address family view, enable MED comparison for routes on a per-AS basis.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] bestroute compare-med
# In BGP-VPN IPv4 unicast address family view, enable MED comparison for routes on a per-AS basis.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] bestroute compare-med
# In BGP IPv6 unicast address family view, enable MED comparison for routes on a per-AS basis.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] bestroute compare-med
bestroute med-confederation
Use bestroute med-confederation to enable MED comparison for routes received from confederation peers.
Use undo bestroute med-confederation to restore the default.
Syntax
bestroute med-confederation
undo bestroute med-confederation
Default
MED comparison is disabled for routes received from confederation peers.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This command enables BGP to compare the MEDs of routes received from confederation peers. However, if a route from a confederation peer has an AS number that does not belong to the confederation, BGP does not compare the route with other routes. For example, a confederation has three AS numbers 65006, 65007, and 65009. BGP receives three routes from different confederation peers. The AS_PATH attributes of these routes are 65006 65009, 65007 65009, and 65008 65009, and the MED values of them are 2, 3, and 1. Because the third route's AS_PATH attribute contains AS number 65008, which does not belong to the confederation, BGP does not compare it with other routes. As a result, the first route becomes the optimal route.
Examples
# In BGP IPv4 unicast address family view, enable MED comparison for routes received from confederation peers.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] bestroute med-confederation
# In BGP-VPN IPv4 unicast address family view, enable MED comparison for routes received from confederation peers.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] bestroute med-confederation
# In BGP IPv6 unicast address family view, enable MED comparison for routes received from confederation peers.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] bestroute med-confederation
bgp
Use bgp to enable BGP and enter BGP view.
Use undo bgp to disable BGP.
Syntax
bgp as-number
undo bgp [ as-number ]
Default
BGP is not enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
as-number: Specifies a local AS by its number in the range of 1 to 4294967295.
Usage guidelines
A router can reside in only one AS, so the router can run only one BGP process.
A router supports 4-byte AS number.
Examples
# Enable BGP, set the local AS number to 100, and enter BGP view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp]
bgp update-delay on-startup
Use bgp update-delay on-startup to configure BGP to delay sending route updates on reboot.
Use undo bgp update-delay on-startup to restore the default.
Syntax
bgp update-delay on-startup seconds
undo bgp update-delay on-startup
Default
BGP sends route updates immediately on reboot.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
seconds: Specifies the delay time in the range of 0 to 3600 seconds. The value of 0 indicates that BGP does not send route updates after the device reboots.
Usage guidelines
After you execute this command, BGP redistributes all routes from other neighbors on reboot, selects the optimal route, and then advertises it. Using this command can reduce traffic loss caused by reboot.
Examples
# In BGP view, configure BGP to delay sending route updates on reboot and set the delay time to 100 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] bgp update-delay on-startup 100
Related commands
bgp update-delay on-startup prefix-list
bgp update-delay on-startup prefix-list
Use bgp update-delay on-startup prefix-list to configure BGP to immediately send route updates for routes that match a prefix list.
Use undo bgp update-delay on-startup prefix-list to restore the default.
Syntax
bgp update-delay on-startup prefix-list prefix-list-name
undo bgp update-delay on-startup prefix-list
Default
No prefix list is specified to filter routes.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
prefix-list-name: Specifies an IPv4 prefix list by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
After the bgp update-delay on-startup command is configured, BGP delays sending updates for all routes on reboot. For BGP to immediately send updates for the specified routes, execute the bgp update-delay on-startup prefix-list command.
This command is available only to IPv4 prefix lists.
Examples
# In BGP view, configure BGP to send updates 100 seconds after reboot and immediately send updates for routes that match prefix list aaa.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp-100] bgp update-delay on-startup 100
[Sysname-bgp-100] bgp update-delay on-startup prefix-list aaa
Related commands
bgp update-delay on-startup
compare-different-as-med
Use compare-different-as-med to enable MED comparison for routes from peers in different ASs.
Use undo compare-different-as-med to disable the comparison.
Syntax
compare-different-as-med
undo compare-different-as-med
Default
The comparison is disabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
If multiple routes to a destination exist, the route with the smallest MED is selected.
Do not use this command unless relevant ASs adopt the same IGP protocol and routing selection method.
Examples
# In BGP IPv4 unicast address family view, enable MED comparison for routes from peers in different ASs.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] compare-different-as-med
# In BGP-VPN IPv4 unicast address family view, enable MED comparison for routes from peers in different ASs.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] compare-different-as-med
# In BGP IPv6 unicast address family view, enable MED comparison for routes from peers in different ASs.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] compare-different-as-med
confederation id
Use confederation id to configure a confederation ID.
Use undo confederation id to remove the specified confederation ID.
Syntax
confederation id as-number
undo confederation id
Default
No confederation ID is configured.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
as-number: Specifies an AS number that identifies the confederation, in the range of 1 to 4294967295.
Usage guidelines
You can split an AS into several sub-ASs, and each sub-AS remains fully meshed. These sub-ASs form a confederation. Key path attributes of a route, such as the Next_HOP, MED, and LOCAL_PREF, are not discarded when crossing each sub-AS. The sub-ASs still look like one AS from the perspective of other ASs. The AS number is the confederation ID.
Confederation can ensure the integrity of the former AS, and solve the problem of too many IBGP connections in the AS.
Configure the same confederation ID for all routers in one confederation.
For a non-confederation BGP router that establishes a BGP connection to a router in a confederation, the confederation ID is the AS number of the router.
Examples
# Confederation 9 consists of four sub-ASs numbered 38, 39, 40 and 41. The peer 10.1.1.1 is a member of sub-AS 38. The peer 200.1.1.1 is a member outside of confederation 9, which belongs to AS 98. Confederation 9 looks like one AS (with AS number 9) from the perspective of the peer 200.1.1.1. This example uses a router in sub-AS 41.
<Sysname> system-view
[Sysname] bgp 41
[Sysname-bgp] confederation id 9
[Sysname-bgp] confederation peer-as 38 39 40
[Sysname-bgp] group Confed38 external
[Sysname-bgp] peer Confed38 as-number 38
[Sysname-bgp] peer 10.1.1.1 group Confed38
[Sysname-bgp] group Remote98 external
[Sysname-bgp] peer Remote98 as-number 98
[Sysname-bgp] peer 200.1.1.1 group Remote98
Related commands
· confederation nonstandard
confederation nonstandard
Use confederation nonstandard to enable compatibility with routers not compliant with RFC 3065 in the confederation.
Use undo confederation nonstandard to restore the default.
Syntax
confederation nonstandard
undo confederation nonstandard
Default
The device is compatible with only routers compliant with RFC 3065 in the confederation.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
Configure this command on all routers compliant with RFC 3065 to interact with those routers not compliant with RFC 3065 in the confederation.
Examples
# Confederation 100 comprises two sub-ASs, 64000 and 65000, and contains routers not compliant with RFC 3065. Enable compatibility with routers not compliant with RFC 3065 in the confederation.
<Sysname> system-view
[Sysname] bgp 64000
[Sysname-bgp] confederation id 100
[Sysname-bgp] confederation peer-as 65000
[Sysname-bgp] confederation nonstandard
Related commands
· confederation id
· confederation peer-as
confederation peer-as
Use confederation peer-as to specify confederation peer sub-ASs.
Use undo confederation peer-as to remove specified confederation peer sub-ASs.
Syntax
confederation peer-as as-number-list
undo confederation peer-as [ as-number-list ]
Default
No confederation peer sub-ASs are specified.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
as-number-list: Specifies a sub-AS number list. A maximum of 32 sub-ASs can be configured in one command line. The expression is as-number-list = as-number &<1-32>. The as-number argument specifies a sub-AS number in the range of 1 to 4294967295, and &<1-32> indicates a maximum of 32 numbers can be specified.
Usage guidelines
Before this configuration, use the confederation id command to specify the confederation for the sub-ASs.
If the undo confederation peer-as command without the as-number-list argument is used, all confederation peer sub-ASs are removed.
Examples
# Specify confederation peer sub-ASs 2000 and 2001.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] confederation id 10
[Sysname-bgp] confederation peer-as 2000 2001
· confederation id
· confederation nonstandard
dampening
Use dampening to enable BGP route dampening.
Use undo dampening to disable route dampening.
Syntax
dampening [ half-life-reachable half-life-unreachable reuse suppress ceiling | route-policy route-policy-name ] *
undo dampening
Default
Route dampening is disabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
half-life-reachable: Specifies a half-life for active routes, in the range of 1 to 45 minutes. By default, the value is 15 minutes.
half-life-unreachable: Specifies a half-life for suppressed routes, in the range of 1 to 45 minutes. By default, the value is 15 minutes.
reuse: Specifies a reuse threshold value for suppressed routes, in the range of 1 to 20000. A suppressed route whose penalty value decreases under the value is reused. By default, the reuse value is 750. The reuse threshold must be less than the suppression threshold.
suppress: Specifies a suppression threshold in the range of 1 to 20000. The route with a penalty value higher than the threshold is suppressed. The default value is 2000.
ceiling: Specifies a ceiling penalty value in the range of 1001 to 20000. The value must be bigger than the suppress value. By default, the value is 16000.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
The command dampens only EBGP routes.
Examples
# In BGP IPv4 unicast address family view, configure BGP route dampening.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] dampening 10 10 1000 2000 10000
# In BGP-VPN IPv4 unicast address family view, configure BGP route dampening.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] dampening 10 10 1000 2000 10000
# In BGP IPv6 unicast address family view, configure BGP route dampening.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] dampening 10 10 1000 2000 10000
# In BGP-VPN IPv6 unicast address family view, configure BGP route dampening.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] dampening 10 10 1000 2000 10000
Related commands
display bgp dampening parameter
default local-preference
Use default local-preference to set a default local preference.
Use undo default local-preference to restore the default.
Syntax
default local-preference value
undo default local-preference
Default
The default local preference is 100.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
value: Sets a default local preference in the range of 0 to 4294967295. A larger value represents a higher preference.
Usage guidelines
You can also use the apply local-preference command in a routing policy to configure the local preference for BGP routes. If no routing policy is configured, all BGP routes use the local preference set by the default local-preference command. If a routing policy is configured, BGP routes matching the routing policy use the local preference set by the apply local-preference command. Other BGP routes use the local preference set by the default local-preference command.
Examples
# In BGP IPv4 unicast address family view, set the default local preference to 180.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] default local-preference 180
# In BGP-VPN IPv6 unicast address family view, set the default local preference to 180.
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] default local-preference 180
Related commands
· apply local-preference
· route-policy
default med
Use default med to set a default MED value.
Use undo default med to restore the default.
Syntax
default med med-value
undo default med
Default
The default MED value is 0.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
med-value: Sets the default MED value in the range of 0 to 4294967295.
Usage guidelines
BGP selects a MED value in the following order:
1. MED set by the apply cost command.
2. MED set by the med keyword in the import-route command.
3. MED set by the default med command.
4. Original MED of a BGP route, or MED changed from the metric of a redistributed IGP route.
Examples
# In BGP IPv4 unicast address family view, set the default MED to 25.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] default med 25
# In BGP-VPN IPv6 unicast address family view, set the default MED to 25.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] default med 25
Related commands
· apply cost
· import-route
· route-policy
default-route imported
Use default-route imported to enable default route redistribution into the BGP routing table.
Use undo default-route imported to restore the default.
Syntax
default-route imported
undo default-route imported
Default
Default route redistribution is not enabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
By default, BGP does not redistribute default IGP routes. You must use the default-route imported command together with the import-route command to redistribute default IGP routes into the BGP routing table.
Examples
# In BGP IPv4 unicast address family view, enable default route redistribution from OSPF process 1 into the BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] default-route imported
[Sysname-bgp-ipv4] import-route ospf 1
# In BGP-VPN IPv4 unicast address family view, enable default route redistribution from OSPF process 1 into the BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] default-route imported
[Sysname-bgp-ipv4-vpn1] import-route ospf 1
# In BGP IPv6 unicast address family view, enable default route redistribution from OSPFv3 process 1 into the IPv6 BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] default-route imported
[Sysname-bgp-ipv6] import-route ospfv3 1
# In BGP-VPN IPv6 unicast address family view, enable default route redistribution from OSPFv3 process 1 into the IPv6 BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] default-route imported
[Sysname-bgp-ipv6-vpn1] import-route ospfv3 1
Related commands
import-route
display bgp dampening parameter
Use display bgp dampening parameter to display BGP route dampening parameters.
Syntax
display bgp dampening parameter { ipv4 | ipv6 } [ unicast ] [ vpn-instance vpn-instance-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays BGP IPv4 route dampening parameters.
ipv6: Displays BGP IPv6 route dampening parameters.
unicast: Displays BGP unicast route dampening parameters.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays BGP route dampening parameters for the public network.
Usage guidelines
By default, the unicast keyword is used.
Examples
# Display BGP IPv4 unicast route dampening parameters for the public network.
<Sysname> display bgp dampening parameter ipv4
Maximum suppression time (in seconds) : 3973
Ceiling value : 16000
Reuse value : 750
Half-life time for reachable routes (in seconds) : 900
Half-life time for unreachable routes (in seconds) : 900
Suppression threshold : 2000
Table 2 Command output
Field |
Description |
Maximum suppression time |
Maximum time (in seconds) for the penalty value to decrease from the ceiling value to the reuse value. |
Ceiling value |
Penalty ceiling value. |
Reuse value |
Reuse threshold. |
Related commands
dampening
display bgp group
Use display bgp group to display BGP peer group information.
Syntax
display bgp group ipv4 [ mdt ] [ group-name group-name ]
display bgp group { ipv4 | ipv6 } [ unicast ] [ vpn-instance vpn-instance-name ] [ group-name group-name ]
display bgp group vpnv4 [ vpn-instance vpn-instance-name ] [ group-name group-name ]
display bgp group { l2vpn | vpnv6 } [ group-name group-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays IPv4 BGP peer group information.
ipv6: Displays IPv6 BGP peer group information.
mdt: Displays BGP MDT peer group information. If you do not specify this keyword, the command displays BGP unicast peer group information.
unicast: Displays BGP unicast peer group information.
vpnv4: Displays BGP VPNv4 peer group information.
l2vpn: Displays BGP L2VPN peer group information.
vpnv6: Displays BGP VPNv6 peer group information.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays BGP peer group information for the public network.
group-name group-name: Specifies a BGP peer group by its name, a case-sensitive string of 1 to 47 characters. If you do not specify a group, this command displays brief information about all BGP peer groups for the specified address family.
Usage guidelines
By default, the unicast keyword is used.
Examples
# Display brief information about all BGP IPv4 unicast peer groups for the public network.
BGP peer group: group1
Remote AS: 600
Type: external
Members:
1.1.1.10
BGP peer group: group2
Remote AS number: not specified
Type: external
Members:
2.2.2.2
# Display detailed information about BGP IPv4 unicast peer group group1 for the public network.
<Sysname> display bgp group ipv4 group-name group1
BGP peer group: group1
Remote AS: 600
Type: external
Maximum number of prefixes allowed: 4294967295
Threshold: 75%
Configured hold time: 180 seconds
Keepalive time: 60 seconds
Minimum time between advertisements: 30 seconds
Peer preferred value: 0
Routing policy configured:
No routing policy is configured
Members:
* - Dynamically created peer
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
1.1.1.10 600 0 0 0 0 00:00:55 Established
# Display detailed information about BGP IPv6 unicast peer group group2 for the public network.
<Sysname> display bgp group ipv6 group-name group2
BGP peer group: group2
Remote AS: 600
Type: external
Maximum number of prefixes allowed: 4294967295
Threshold: 75%
Configured hold time: 180 seconds
Keepalive time: 60 seconds
Minimum time between advertisements: 30 seconds
Peer preferred value: 0
IPsec profile name: profile001
Routing policy configured:
No routing policy is configured
Members:
* - Dynamically created peer
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
2::2 600 0 0 0 0 00:00:45 Established
3::3 600 0 0 0 0 00:00:40 Established
Table 3 Command output
Field |
Description |
BGP peer group |
Name of the BGP peer group. |
Remote AS |
AS number of the peer group. |
Type |
Type of the peer groups: · external—EBGP peer group. · internal—IBGP peer group. |
Maximum number of prefixes allowed |
Maximum number of routes allowed to learn from the peer. This field does not apply to BGP L2VPN. |
Threshold |
Percentage of received routes from the peer to maximum routes allowed to learn from the peer. If the percentage is reached, the system generates a log message. This field does not apply to BGP L2VPN. |
Configured hold time |
Configured hold interval in seconds. |
Keepalive time |
Keepalive interval in seconds. |
Minimum time between advertisements |
Minimum route advertisement interval in seconds. |
Peer preferred value |
Preferred value specified for routes from the peer. This field does not apply to BGP L2VPN. |
Routing policy configured |
Routing policy configured for the peer group. If you do not specify a routing policy, this field displays No routing policy is configured. This field does not apply to BGP L2VPN. |
Members |
Information about peers included in the peer group. |
* - Dynamically created peer |
An asterisk (*) before a peer address indicates that the peer is a dynamic peer. |
Peer |
IP or IPv6 address of the peer. |
AS |
AS number of the peer. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages to be sent. |
PrefRcv |
For the IPv4, IPv6, VPNv4, and VPNv6 address families, this field displays the number of prefixes received from the peer. For MPLS L2VPN, this field displays the number of label blocks received from the peer. For VPLS, this field displays the total number of label blocks and VPLS PEs discovered by BGP. |
Up/Down |
Lasting time of the current BGP session state. |
State |
Current state of the BGP session between the local router and the peer. |
IPsec profile name |
IPsec profile applied to the IPv6 BGP peer group. |
display bgp network
Use display bgp network to display information about routes advertised by the network command and shortcut routes configured by the network short-cut command.
Syntax
display bgp network { ipv4 | ipv6 } [ unicast ] [ vpn-instance vpn-instance-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays IPv4 address family information.
ipv6: Displays IPv6 address family information.
unicast: Displays BGP unicast address family information.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays routing information for the public network.
Usage guidelines
By default, the unicast keyword is used.
Examples
# Display information about routes advertised by the network command and shortcut routes configured by the network short-cut command in the IPv4 unicast address family for the public network.
<Sysname> display bgp network ipv4
BGP local router ID: 192.168.1.135
Local AS number: 100
Network Mask Route-policy Short-cut
20.1.1.0 255.255.255.0 No
40.1.1.0 255.255.255.0 abc No
30.1.1.0 255.255.255.0 Yes
# Display information about routes advertised by the network command and shortcut routes configured by the network short-cut command in the IPv6 unicast address family for the public network.
<Sysname> display bgp network ipv6
BGP local router ID: 192.168.1.135
Local AS number: 100
Network PrefixLen Route-policy Short-cut
1:: 24 No
2:: 24 No
3:: 64 policy1 No
2:: 24 Yes
# Display information about routes advertised by the network command and shortcut routes configured by the network short-cut command in the IPv4 unicast address family in VPN instance vpn1.
<Sysname> display bgp network ipv4 vpn-instance vpn1
BGP local router ID: 192.168.1.135
Local AS number: 100
Network Mask Route-policy Short-cut
50.1.1.0 255.255.255.0 No
40.1.1.0 255.255.255.0 Yes
Table 4 Command output
Field |
Description |
Network |
Destination network address of the routes advertised by the network command and the shortcut routes. |
Mask |
Mask of the destination network address. |
PrefixLen |
Prefix length of the destination network address. |
Route-policy |
Routing policy that is applied to the route. |
Short-cut |
Whether the route is a shortcut route: · Yes. · No. |
display bgp non-stop-routing status
Use display bgp non-stop-routing status to display BGP NSR status information.
Syntax
display bgp non-stop-routing status
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Examples
# Display BGP NSR status information.
<Sysname> display bgp non-stop-routing status
BGP NSR status: Ready
Location of preferred standby process: Chassiss 0 slot 1
TCP NSR status: Ready
Table 5 Command output
Field |
Description |
BGP NSR status |
BGP NSR status: · Ready—BGP NSR has backed up BGP neighbor and routing information from the active process to the standby process. In this state, BGP NSR can ensure continuous routing when an active/standby process switchover occurs. · Not ready—BGP NSR is backing up BGP neighbor and routing information from the active process to the standby process. If an active/standby process switchover occurs in this state, traffic is interrupted and the BGP session will be re-established. · Not configured—BGP NSR is disabled. |
Location of preferred standby process |
ID of the slot where the preferred standby process resides (in standalone mode). Chassis ID and slot ID where the preferred standby process resides (in IRF mode). |
TCP NSR status |
TCP NSR status: · Ready—TCP NSR has backed up TCP connection information from the active process to the standby process. · Not ready—TCP NSR is backing up TCP connection information from the active process to the standby process. |
display bgp paths
Use display bgp paths to display BGP path attribute information.
Syntax
display bgp paths [ as-regular-expression ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
as-regular-expression: Displays information about BGP path attributes whose AS_PATH attribute matches the specified regular expression. The as-regular-expression argument is a string of 1 to 256 characters. If you do not specify this argument, the command displays information about all BGP path attributes.
Examples
# Display information about all BGP path attributes.
<Sysname> display bgp paths
RefCount MED Path/Origin
3 0 ?
2 0 100i
3 0 100i
1 0 ?
1 0 ?
1 0 ?
Table 6 Command output
Field |
Description |
RefCount |
Number of BGP routes with these path attributes. |
MED |
MULTI_EXIT_DISC attribute. |
Path/Origin |
AS_PATH and ORIGIN attributes of the route: · AS_PATH attribute—Records the ASs the route has passed. · ORIGIN attribute—Identifies the origin of the route: ¡ i—Originated in the AS. The origin of routes advertised with the network command is IGP. ¡ e—Learned through EGP. ¡ ?—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
display bgp peer
Use display bgp peer to display BGP peer or peer group information.
Syntax
In standalone mode:
display bgp peer ipv4 [ mdt ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ [ ip-address ] verbose ] [ standby slot slot-number ] ]
display bgp peer ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby slot slot-number ] ]
display bgp peer ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ ipv6-address prefix-length | { ipv6-address | group-name group-name } log-info | [ ipv6-address ] verbose [ standby slot slot-number ] ]
display bgp peer ipv6 [ unicast ] [ ip-address mask-length | ip-address log-info | [ ip-address ] verbose [ standby slot slot-number ] ]
display bgp peer vpnv4 [ vpn-instance vpn-instance-name ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby slot slot-number ] ]
display bgp peer { l2vpn | vpnv6 } [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby slot slot-number ] ]
In IRF mode:
display bgp peer ipv4 [ mdt ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ [ ip-address ] verbose ] [ standby chassis chassis-number slot slot-number ] ]
display bgp peer ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby chassis chassis-number slot slot-number ] ]
display bgp peer ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ ipv6-address prefix-length | { ipv6-address | group-name group-name } log-info | [ ipv6-address ] verbose [ standby chassis chassis-number slot slot-number ] ]
display bgp peer ipv6 [ unicast ] [ ip-address mask-length | ip-address log-info | [ ip-address ] verbose [ standby chassis chassis-number slot slot-number ] ]
display bgp peer vpnv4 [ vpn-instance vpn-instance-name ] [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby chassis chassis-number slot slot-number ] ]
display bgp peer { l2vpn | vpnv6 } [ ip-address mask-length | { ip-address | group-name group-name } log-info | [ ip-address ] verbose [ standby chassis chassis-number slot slot-number ] ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays IPv4 BGP peer or peer group information.
ipv6: Displays IPv6 BGP peer or peer group information.
mdt: Displays BGP MDT peer or peer group information. If you do not specify this keyword, the command displays BGP unicast peer or peer group information.
vpnv4: Displays BGP VPNv4 peer or peer group information.
l2vpn: Displays BGP L2VPN peer or peer group information.
vpnv6: Displays BGP VPNv6 peer or peer group information.
unicast: Displays BGP unicast peer or peer group information.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays BGP peer or peer group information for the public network.
ip-address mask-length: Specifies a subnet. The value range for the mask length is 0 to 32. If you specify a subnet, this command displays information about all dynamic peers in the subnet.
ip-address: Specifies a peer by its IP address.
ipv6-address prefix-length: Specifies a subnet. The value range for the prefix length is 0 to 128. If you specify a subnet, this command displays information about all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address.
group-name group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters.
log-info: Displays log information.
verbose: Displays detailed information.
standby: Displays BGP peer or peer group information for a standby BGP process. If you do not specify a standby BGP process, this command displays BGP peer or peer group information for the active BGP process.
slot slot-number: Specifies the slot number of the card where the standby process resides. (In standalone mode.)
chassis chassis-number slot slot-number: Specifies the card where the standby process resides. The chassis-number argument represents the member ID of the IRF member device. The slot-number argument represents the slot number of the card. (In IRF mode.)
Usage guidelines
If you do not specify any parameters, this command displays brief information about all BGP peers for the specified address family of the active BGP process.
By default, the unicast keyword is used.
Examples
# Display brief information about all public BGP IPv4 unicast peers.
<Sysname> display bgp peer ipv4
BGP local router ID: 192.168.100.1
Local AS number: 100
Total number of peers: 1 Peers in established state: 1
* - Dynamically created peer
Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State
10.2.1.2 200 13 16 0 0 00:10:34 Established
Table 7 Command output
Field |
Description |
* - Dynamically created peer |
An asterisk (*) before a peer address indicates that the peer is a dynamic peer. |
Peer |
IP or IPv6 address of the peer. |
AS |
AS number of the peer. |
MsgRcvd |
Number of messages received. |
MsgSent |
Number of messages sent. |
OutQ |
Number of messages to be sent. |
PrefRcv |
For the IPv4, IPv6, VPNv4, and VPNv6 address families, this field displays the number of prefixes that have been received from the peer and added into the local BGP routing table. For MPLS L2VPN, this field displays the number of label blocks received from the peer. For VPLS, this field displays the total number of label blocks and VPLS PEs discovered by BGP. |
Up/Down |
Lasting time of the current BGP session state. |
State |
Current state of the BGP session between the local router and the peer. |
# Display brief information about all dynamic peers in network 1.1.1.0/24.
<Sysname> display bgp peer ipv4 1.1.1.0 24
Type: EBGP link
Dynamic address range: 1.1.1.0 24
Configured: Active Hold Time: 3 sec Keepalive Time: 1 sec
Address family IPv4 Unicast: Configured
Address family IPv4 Label: Configured
Address family VPNv4: Configured
Address family IPv6 Unicast: Configured
Address family VPNv6: Configured
Maximum allowed prefix number: 100
Threshold: 75%
Minimum time between advertisements is 100 seconds
Optional capabilities:
Multi-protocol extended capability has been enabled
Route refresh capability has been enabled
Nexthop self has been configured
Keep-all-routes has been configured
Send community has been configured
Send extend community has been configured
Default route originating has been configured
Multi-hop ebgp has been enabled
Peer preferred value: 100
BFD: Enabled
Routing policy configured:
No import as-path-acl list
Export as-path-acl list is: 22
No import prefix list
Export prefix list is: p1
No import route policy
Export route policy is: p1
No import filter-policy
No export filter-policy
Dynamic peers:
1.1.1.3
# Display brief information about all dynamic peers in network 1::/64.
<Sysname> display bgp peer ipv6 1:: 64
Type: IBGP link
Dynamic address range: 1:: 64
Configured: Active Hold Time: 180 sec Keepalive Time: 60 sec
Address family IPv6 Unicast: Configured
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisements is 15 seconds
Optional capabilities:
Multi-protocol extended capability has been enabled
Route refresh capability has been enabled
Send community has been configured
Peer preferred value: 0
Routing policy configured:
No routing policy is configured
Dynamic peers:
1::1
Table 8 Command output
Field |
Description |
Type |
BGP connection type between the local router and the dynamic peer: · IBGP link—IBGP connection. · EBGP link—EBGP connection. |
Configured |
Timers configured on the local router in seconds, including the holdtime (Active Hold Time) and keepalive interval (Keepalive Time). |
Address family IPv4 Unicast |
IPv4 unicast address family capability. |
Address family IPv6 Unicast |
IPv6 unicast address family capability. |
Address family L2VPN |
L2VPN address family capability. |
Address family L2VPN VPWS (Draft) |
L2VPN VPWS address family capability. |
Maximum allowed prefix number |
Maximum number of routes allowed to learn from the peer. This field does not apply to BGP L2VPN. |
Threshold |
Percentage of received routes from the peer to maximum routes allowed to learn from the peer. If the percentage is reached, the system generates alarm messages. This field does not apply to BGP L2VPN. |
Minimum time between advertisements |
Minimum route advertisement interval in seconds. |
Optional capabilities |
Optional capabilities supported by the local end. |
Peer Preferred Value |
Preferred value specified for the routes from the peer. This field does not apply to BGP L2VPN. |
BFD |
Whether BFD is enabled to detect the link to the BGP peers. |
IPsec profile name |
IPsec profile applied to the IPv6 BGP peer. This field is available only for the IPv6 unicast address family. |
Routing policy configured |
Routing policy configured for the peer. If you do not specify a routing policy, this field displays No routing policy is configured. This field does not apply to BGP L2VPN. |
Dynamic peers |
IP addresses of dynamic peers. |
# Display detailed information about the public BGP IPv4 unicast peer 10.2.1.2.
<Sysname> display bgp peer ipv4 10.2.1.2 verbose
Peer: 10.2.1.2 Local: 192.168.100.1
Type: EBGP link
BGP version 4, remote router ID 192.168.100.2
BGP current state: Established, Up for 00h11m10s
BGP current event: RecvKeepalive
BGP last state: OpenConfirm
Port: Local - 179 Remote - 60672
Configured: Active Hold Time: 180 sec Keepalive Time: 60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec Keepalive Time: 60 sec
Peer optional capabilities:
Peer support BGP multi-protocol extended
Peer support BGP route refresh capability
Peer support BGP route AS4 capability
Address family IPv4 Unicast: advertised and received
Received: Total 13 messages, Update messages 0
Sent: Total 16 messages, Update messages 0
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisements is 30 seconds
Optional capabilities:
Multi-protocol extended capability has been enabled
Route refresh capability has been enabled
Peer Preferred Value: 0
BFD: Enabled
Routing policy configured:
No routing policy is configured
# Display detailed information about the public BGP IPv6 unicast peer 1::2.
<Sysname> display bgp peer ipv6 1::2 verbose
Peer: 1::2 Local: 192.168.1.136
Type: EBGP link
BGP version 4, remote router ID 192.168.1.135
BGP current state: Established, Up for 00h05m48s
BGP current event: RecvKeepalive
BGP last state: OpenConfirm
Port: Local - 13184 Remote - 179
Configured: Active Hold Time: 180 sec Keepalive Time: 60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec Keepalive Time: 60 sec
Peer optional capabilities:
Peer support BGP multi-protocol extended
Peer support BGP route refresh capability
Peer support BGP route AS4 capability
Address family IPv6 Unicast: advertised and received
Received: Total 9 messages, Update messages 1
Sent: Total 10 messages, Update messages 1
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisements is 30 seconds
Optional capabilities:
Multi-protocol extended capability has been enabled
Route refresh capability has been enabled
Peer preferred value: 0
BFD: Enabled
IPsec profile name: profile001
Routing policy configured:
No routing policy is configured
# Display detailed information about BGP L2VPN peer 10.1.1.1.
<Sysname> display bgp peer l2vpn 10.1.1.1 verbose
Peer: 10.1.1.1 Local: 192.168.1.136
Type: EBGP link
BGP version 4, remote router ID 192.168.1.135
BGP current state: Established, Up for 00h01m25s
BGP current event: KATimerExpired
BGP last state: OpenConfirm
Port: Local - 179 Remote - 1049
Configured: Active Hold Time: 180 sec Keepalive Time: 60 sec
Received : Active Hold Time: 180 sec
Negotiated: Active Hold Time: 180 sec Keepalive Time: 60 sec
Peer optional capabilities:
Peer support BGP multi-protocol extended
Peer support BGP route refresh capability
Peer support BGP route AS4 capability
Address family IPv4 Unicast: advertised and received
Address family L2VPN: advertised
Address family L2VPN VPWS (Draft): advertised and received
InQ updates: 0, OutQ updates: 0
NLRI statistics:
Rcvd: UnReach NLRI 0, Reach NLRI 0
Sent: UnReach NLRI 0, Reach NLRI 3
Message statistics:
Msg type Last rcvd time/ Current rcvd count/ History rcvd count/
Last sent time Current sent count History sent count
Open 18:59:15-2013.4.24 1 1
18:59:15-2013.4.24 1 2
Update - 0 0
18:59:16-2013.4.24 1 1
Notification - 0 0
18:59:15-2013.4.24 0 1
Keepalive 18:59:15-2013.4.24 1 1
18:59:15-2013.4.24 1 1
RouteRefresh - 0 0
- 0 0
Total - 2 2
- 3 5
Maximum allowed prefix number: 4294967295
Threshold: 75%
Minimum time between advertisements is 30 seconds
Optional capabilities:
Multi-protocol extended capability has been enabled
Route refresh capability has been enabled
Peer Preferred Value: 0
BFD: Enabled
Routing policy configured:
No routing policy is configured
Table 9 Command output
Field |
Description |
Peer |
IP or IPv6 address of the peer. |
Local |
Local router ID. |
Type |
BGP connection type between the local router and the peer: · IBGP link—IBGP connection. · EBGP link—EBGP connection. |
remote router ID |
Router ID of the peer. |
BGP current state |
Current state of the BGP session between the local router and the peer. |
Up for |
Lasting time of the BGP session. |
BGP current event |
Current event of the BGP session between the local router and the peer. |
BGP last state |
Previous state of the BGP session. |
Port |
TCP port numbers of the local router and its peer. |
Configured |
Timers configured on the local router in seconds, including the holdtime (Active Hold Time) and keepalive interval (Keepalive Time). |
Received |
Received timer (configured on the peer) in seconds, including the holdtime (Active Hold Time). |
Negotiated |
Negotiated timers in seconds, including the holdtime (Active Hold Time) and keepalive interval (Keepalive Time). |
Peer optional capabilities |
Optional capabilities supported by the peer. |
Peer support BGP route AS4 capability |
The peer supports 4-byte AS number. |
Address family IPv4 Unicast |
IPv4 unicast address family capability: Routes of the address family can be advertised and received. |
Address family IPv6 Unicast |
IPv6 unicast address family capability. |
Address family L2VPN |
L2VPN address family capability. |
Address family L2VPN VPWS (Draft) |
L2VPN VPWS address family capability (draft-kompella-ppvpn-l2vpn-03). |
Received |
Number of received messages and number of received update messages. |
Sent |
Number of sent messages and number of sent update messages. |
Maximum allowed prefix number |
Maximum number of routes allowed to learn from the peer. This field does not apply to BGP L2VPN. |
Threshold |
Percentage of received routes from the peer to maximum routes allowed to learn from the peer. If the percentage is reached, the system generates alarm messages. This field does not apply to BGP L2VPN. |
Minimum time between advertisements |
Minimum route advertisement interval in seconds. |
Optional capabilities |
Optional capabilities supported by the local end. |
Peer Preferred Value |
Preferred value specified for the routes from the peer. This field does not apply to BGP L2VPN. |
BFD |
Whether BFD is enabled to detect the link to the BGP peer. |
Routing policy configured |
Routing policy configured for the peer. If you do not specify a routing policy, this field displays No routing policy is configured. This field does not apply to BGP L2VPN. |
# Display log information for the public BGP IPv4 unicast peer 1.1.1.1.
<Sysname> display bgp peer ipv4 1.1.1.1 log-info
Peer : 1.1.1.1
Date Time State Notification
Error/SubError
06-Feb-2013 22:54:42 Down Send notification with error 6/4
Cease/Administrative Reset
<administrative reset>
Table 10 Command output
Field |
Description |
Peer |
IP or IPv6 address of the peer. |
Date |
Date on which the Notification was sent or received. |
Time |
Time at which the Notification was sent or received. |
State |
BGP session state: · Up—The BGP session is in Established state. · Down—The BGP session is down. |
Notification Error/SubError |
Error code of the Notification, indicating the cause of why the BGP session was down. · Error—Refers to the error code, which identifies the type of the Notification. · SubError—Refers to the error subcode of the Notification, which identifies the specific information about the reported error. |
display bgp routing-table dampened
Use display bgp routing-table dampened to display dampened BGP routes.
Syntax
display bgp routing-table dampened { ipv4 | ipv6 } [ unicast ] [ vpn-instance vpn-instance-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays dampened BGP IPv4 routes.
ipv6: Displays dampened BGP IPv6 routes.
unicast: Displays dampened BGP unicast routes.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays dampened BGP routes for the public network.
Usage guidelines
By default, the unicast keyword is used.
Examples
# Display dampened BGP IPv4 unicast routes.
<Sysname> display bgp routing-table dampened ipv4
Total number of routes: 1
BGP local router ID is 192.168.1.135
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network From Reuse Path/Ogn
de 20.1.1.0/24 10.1.1.2 00:56:27 100i
# Display dampened BGP IPv6 unicast routes.
<Sysname> display bgp routing-table dampened ipv6
Total number of routes: 2
BGP local router ID is 192.168.1.135
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
de Network : 2:: PrefixLen : 64
From : 10.1.1.1 Reuse : 00:39:49
Path/Ogn: 100i
de Network : 2:: PrefixLen : 64
From : 1::1 Reuse : 00:39:49
Path/Ogn: 100i
Table 11 Command output
Field |
Description |
Status codes |
Status codes: · * – valid—Valid route. · > – best—Optimal route. · d – dampened—Dampened route. · h – history—History route. · s – suppressed—Suppressed route. · S – stale—Stale route. · i – internal—Internal route. · e – external—External route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised with the network command is IGP. · e – EGP—Learned through EGP. · ?– incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Network |
Destination network address. |
From |
IP address from which the route was received. |
Reuse |
Reuse time of the route. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH attribute—Records the ASs the route has passed. · ORIGIN attribute—Identifies the origin of the route. |
Related commands
· dampening
· reset bgp dampening
display bgp routing-table flap-info
Use display bgp routing-table flap-info to display BGP route flap statistics.
Syntax
display bgp routing-table flap-info ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address [ { mask | mask-length } [ longest-match ] ] | as-path-acl as-path-acl-number ]
display bgp routing-table flap-info ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address prefix-length | as-path-acl as-path-acl-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays BGP IPv4 route flap statistics.
ipv6: Displays BGP IPv6 route flap statistics.
unicast: Displays BGP unicast route flap statistics.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays BGP route flap statistics for the public network.
network-address: Specifies a destination network address.
mask: Specifies a network mask, in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
longest-match: Specifies longest match mode, which selects the longest matching route through the following steps:
1. ANDs the specified network address with the mask of each route.
2. Matches a route if the AND result is the same as the network address of the route and the mask of the route is shorter than or equal to the specified mask.
3. Selects the route with the longest mask among the matching routes.
network-address prefix-length: Displays route flap statistics for BGP IPv6 routes that match the specified network address, and match the prefix length in the range of 0 to 128.
as-path-acl as-path-acl-number: Displays route flap statistics for BGP routes that match the AS path list specified by its number in the range of 1 to 256.
Usage guidelines
If you specify only the network-address argument, the system ANDs the network address with the mask of a route. If the result matches the network address of the route, the command displays flap statistics of the route.
If you specify the network-address mask or network-address mask-length argument, and do not specify the longest-match keyword, the command displays flap statistics of the BGP IPv4 unicast route that matches both the specified destination network address and the mask (or mask length).
By default, the unicast keyword is used.
Examples
# Display BGP IPv4 unicast route flap statistics for the public network.
<Sysname> display bgp routing-table flap-info ipv4
Total number of routes: 1
BGP local router ID is 192.168.1.135
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network From Flaps Duration Reuse Path/Ogn
de 20.1.1.0/24 10.1.1.2 1 00:02:36 00:53:58 100i
# Display BGP IPv6 unicast route flap statistics for the public network.
<Sysname> display bgp routing-table flap-info ipv6
Total number of routes: 2
BGP local router ID is 192.168.1.135
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
de Network : 2:: PrefixLen : 64
From : 10.1.1.1 Flaps : 5
Duration: 00:03:25 Reuse : 00:39:28
Path/Ogn: 100i
de Network : 2:: PrefixLen : 64
From : 1::1 Flaps : 5
Duration: 00:03:25 Reuse : 00:39:28
Path/Ogn: 100i
Table 12 Command output
Field |
Description |
Status codes |
Status codes: · * – valid—Valid route. · > – best—Optimal route. · d – dampened—Dampened route. · h – history—History route. · s – suppressed—Suppressed route. · S – stale—Stale route. · i – internal—Internal route. · e – external—External route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised with the network command is IGP. · e – EGP—Learned through EGP. · ?– incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Network |
Destination network address. |
From |
Source IP address of the route. |
Flaps |
Number of routing flaps. |
Duration |
Duration time of the flap route. |
Reuse |
Reuse time of the route. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH attribute—Records the ASs the route has passed. · ORIGIN attribute—Identifies the origin of the route. |
Related commands
· dampening
· reset bgp flap-info
display bgp routing-table ipv4 unicast
Use display bgp routing-table ipv4 unicast to display BGP IPv4 unicast routing information.
Syntax
display bgp routing-table ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address [ { mask | mask-length } [ longest-match ] ] | network-address [ mask | mask-length ] advertise-info | as-path-acl as-path-acl-number | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } | peer ip-address { advertised-routes | received-routes } [ network-address [ mask | mask-length ] | statistics ] | statistics ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays the BGP IPv4 unicast routing information for the public network.
network-address: Specifies a destination network address.
mask: Specifies a network mask, in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
longest-match: Specifies longest match mode, which selects the longest matching route through the following steps:
1. ANDs the specified network address with the mask of each route.
2. Matches a route if the AND result is the same as the network address of the route and the mask of the route is shorter than or equal to the specified mask.
3. Selects the route with the longest mask among the matching routes.
advertise-info: Displays advertisement information for BGP IPv4 unicast routes.
as-path-acl as-path-acl-number: Displays BGP IPv4 unicast routes that match the AS path list specified by its number in the range of 1 to 256.
community-list: Displays BGP IPv4 unicast routes that match a community list.
basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99.
comm-list-name: Specifies a community list by its name, a case-sensitive string of 1 to 63 characters.
whole-match: Displays routes exactly matching the specified community list. If you do not specify this keyword, the command displays routes whose COMMUNITY attributes include the specified community list.
adv-community-list-number: Specifies an advanced community list by its number in the range of 100 to 199.
peer ip-address: Displays BGP IPv4 unicast routing information advertised to or received from the specified peer.
advertised-routes: Displays routing information advertised to the specified peer.
received-routes: Displays routing information received from the specified peer.
statistics: Displays routing statistics.
Usage guidelines
If you do not specify any parameters, this command displays brief information about all BGP IPv4 unicast routes.
If you specify only the network-address argument, the system ANDs the network address with the mask of a route. If the result matches the network address of the route, the command displays information about the route.
If you specify the network-address mask or network-address mask-length argument and do not specify the longest-match keyword, this command displays information about the BGP IPv4 unicast route that matches both the specified destination network address and the mask (or mask length).
This command displays BGP IPv4 unicast routing information regardless of whether or not the unicast keyword is specified.
Examples
# Display brief information about all public BGP IPv4 unicast routes.
<Sysname> display bgp routing-table ipv4
Total number of routes: 4
BGP local router ID is 192.168.100.1
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
* > 10.2.1.0/24 10.2.1.1 0 0 i
e 10.2.1.2 0 0 200i
* > 192.168.1.0 192.168.1.135 0 0 i
* e 10.2.1.2 0 0 200i
# Display information about BGP IPv4 unicast routes that match AS path list 1.
<Sysname> display bgp routing-table ipv4 as-path-acl 1
Total number of routes: 1
BGP local router ID is 2.2.2.2
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
* >e 30.1.1.0/24 20.1.1.1 0 200i
# Display information about all public BGP IPv4 unicast routes advertised to peer 10.2.1.2.
<Sysname> display bgp routing-table ipv4 peer 10.2.1.2 advertised-routes
Total number of routes: 2
BGP local router ID is 192.168.100.1
Status codes: * - valid, > - best, d - damped, h - history,
s - suppressed, S - Stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
* > 10.2.1.0/24 10.2.1.1 0 0 i
* > 192.168.1.0 192.168.1.135 0 0 i
# Display information about all public BGP IPv4 unicast routes received from peer 10.2.1.2.
<Sysname> display bgp routing-table ipv4 peer 10.2.1.2 received-routes
Total number of routes: 2
BGP local router ID is 192.168.100.1
Status codes: * - valid, > - best, d - damped, h - history,
s - suppressed, S - Stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
Network NextHop MED LocPrf PrefVal Path/Ogn
e 10.2.1.0/24 10.2.1.2 0 0 200i
* e 192.168.1.0 10.2.1.2 0 0 200i
Field |
Description |
Status codes |
Status codes: · * – valid—Valid route. · > – best—Optimal route. · d – dampened—Dampened route. · h – history—History route. · s – suppressed—Suppressed route. · S – stale—Stale route. · i – internal—Internal route. · e – external—External route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised with the network command is IGP. · e – EGP—Learned through EGP. · ?– incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Network |
Destination network address. |
NextHop |
Next hop IP address. |
MED |
MULTI_EXIT_DISC attribute. |
LocPrf |
Local preference value. |
PrefVal |
Preferred value of the route. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH—Records the ASs the route has passed. · ORIGIN—Identifies the origin of the route. |
# Display detailed information about public BGP IPv4 unicast routes destined to network 10.2.1.0/24.
<Sysname> display bgp routing-table ipv4 10.2.1.0 24
BGP local router ID: 192.168.100.1
Local AS number: 100
Paths: 2 available, 1 best
BGP routing table information of 10.2.1.0/24:
Imported route.
Original nexthop: 10.2.1.1
OutLabel : NULL
AS-path : (null)
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, local, best
From : 10.2.1.2 (192.168.100.2)
Rely nexthop : not resolved
Original nexthop: 10.2.1.2
OutLabel : NULL
AS-path : 200
Origin : igp
Attribute value : MED 0, pref-val 0
State : external
Table 14 Command output
Field |
Description |
Paths |
Number of routes: · available—Number of valid routes. · best—Number of optimal routes. |
Original nexthop |
Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message. |
OutLabel |
Outgoing label of the route. |
AS-path |
AS_PATH attribute of the route. |
Origin |
Origin of the route: · igp—Originated in the AS. The origin of routes advertised with the network command is IGP. · egp—Learned through EGP. · incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Attribute value |
BGP path attributes: · MED—MED value. · localpref—Local preference value. · pref-val—Preferred value. |
State |
Current state of the route: · valid. · internal. · external. · local. · synchronize. · best. |
From |
IP address of the BGP peer that advertised the route. |
Rely Nexthop |
Next hop found by route recursion. If no next hop is found, this field displays not resolved. |
# Display statistics for public BGP IPv4 unicast routes advertised to peer 10.2.1.2.
<Sysname> display bgp routing-table ipv4 peer 10.2.1.2 advertised-routes statistics
Advertised routes total: 2
# Display statistics for public BGP IPv4 unicast routes received from peer 10.2.1.2.
<Sysname> display bgp routing-table ipv4 peer 10.2.1.2 received-routes statistics
Received routes total: 2
Table 15 Command output
Field |
Description |
Advertised routes total |
Total number of advertised routes. |
Received routes total |
Total number of received routes. |
# Display public BGP IPv4 unicast route statistics.
<Sysname> display bgp routing-table ipv4 statistics
Total number of routes: 4
Table 16 Command output
Field |
Description |
Total number of routes |
Total number of routes. |
# Display advertisement information for the public BGP IPv4 unicast route destined to network 10.2.1.0/24.
<Sysname> display bgp routing-table ipv4 10.2.1.0 24 advertise-info
BGP local router ID: 192.168.100.1
Local AS number: 100
Paths: 1 best
BGP routing table information of 10.2.1.0/24:
Advertised to peers (1 in total):
10.2.1.2
Table 17 Command output
Field |
Description |
BGP local router ID |
Local BGP router ID. |
Local AS number |
Local AS number. |
Paths |
Number of optimal routes to the destination. |
BGP routing table information of 10.2.1.0/24 |
Advertisement information for network 10.2.1.0/24. |
Advertised to peers (1 in total) |
Peers to which the network has been advertised. |
Related commands
· ip as-path
· ip community-list
display bgp routing-table ipv6 unicast
Use display bgp routing-table ipv6 unicast to display BGP IPv6 unicast routing information.
Syntax
display bgp routing-table ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address prefix-length [ advertise-info ] | as-path-acl as-path-acl-number | community-list { { basic-community-list-number | comm-list-name } [ whole-match ] | adv-community-list-number } | peer ipv6-address { advertised-routes | received-routes } [ network-address prefix-length | statistics ] | statistics ]
display bgp routing-table ipv6 [ unicast ] peer ip-address { advertised-routes | received-routes } [ network-address prefix-length | statistics ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays the BGP IPv6 unicast routing information for the public network.
network-address prefix-length: Specifies the destination network address and prefix length. The value range for the prefix-length argument is 0 to 128. If you do not specify this argument, the command displays brief information about all BGP IPv6 unicast routing information.
advertise-info: Displays advertisement information for BGP IPv6 unicast routes. If you do not specify this keyword, the command displays the BGP IPv6 unicast routing table.
as-path-acl as-path-acl-number: Displays BGP IPv6 unicast routes that match the AS path list specified by its number in the range of 1 to 256.
community-list: Displays BGP IPv6 unicast routes that match a community list.
basic-community-list-number: Specifies a basic community list by its number in the range of 1 to 99.
comm-list-name: Specifies a community list by its name, a case-sensitive string of 1 to 63 characters.
whole-match: Displays routes exactly matching the specified community list. If you do not specify this keyword, the command displays routes whose COMMUNITY attributes include the specified community list.
adv-community-list-number: Specifies an advanced community list by its number in the range of 100 to 199.
peer: Displays BGP IPv6 unicast routing information advertised to or received from the specified peer.
ip-address: Specifies the peer IPv4 address.
ipv6-address: Specifies the peer IPv6 address.
advertised-routes: Displays routing information advertised to the specified peer.
received-routes: Displays routing information received from the specified peer.
statistics: Displays routing statistics.
Usage guidelines
This command displays BGP IPv6 unicast routing information regardless of whether or not the unicast keyword is specified.
Examples
# Display brief information about all public BGP IPv6 unicast routes.
<Sysname> display bgp routing-table ipv6
Total number of routes: 1
BGP local router ID is 192.168.1.136
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* >e Network : 3:: PrefixLen : 64
NextHop : 1::2 LocPrf :
PrefVal : 0 OutLabel : NULL
MED :
Path/Ogn: 100i
# Display information about BGP IPv6 unicast routes that match AS path list 1.
<Sysname> display bgp routing-table ipv6 as-path-acl 1
Total number of routes: 2
BGP local router ID is 192.168.1.136
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* >e Network : 2:: PrefixLen : 64
NextHop : 1::2 LocPrf :
PrefVal : 0 OutLabel : NULL
MED :
Path/Ogn: 100i
* >e Network : 3:: PrefixLen : 64
NextHop : 1::2 LocPrf :
PrefVal : 0 OutLabel : NULL
MED :
Path/Ogn: 100i
# Display information about BGP IPv6 unicast routes that match BGP community list 100.
<Sysname> display bgp routing-table ipv6 community-list 100
Total number of routes: 2
BGP local router ID is 192.168.1.136
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* >e Network : 2:: PrefixLen : 64
NextHop : 1::2 LocPrf :
PrefVal : 0 OutLabel : NULL
MED :
Path/Ogn: 100i
* >e Network : 3:: PrefixLen : 64
NextHop : 1::2 LocPrf :
PrefVal : 0 OutLabel : NULL
MED :
Path/Ogn: 100i
# Display information about all BGP IPv6 unicast routes advertised to peer 1::1.
<Sysname> display bgp routing-table ipv6 peer 1::1 advertised-routes
Total number of routes: 1
BGP local router ID is 192.168.1.136
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* > Network : 2:: PrefixLen : 64
NextHop : :: LocPrf :
MED : 0 OutLabel : NULL
Path/Ogn: i
# Display information about all BGP IPv6 unicast routes received from peer 1::1.
<Sysname> display bgp routing-table ipv6 peer 1::1 received-routes
Total number of routes: 1
BGP local router ID is 192.168.1.135
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* >e Network : 2:: PrefixLen : 64
NextHop : ::FFFF:10.1.1.1 LocPrf :
PrefVal : 0 OutLabel : NULL
MED : 0
Path/Ogn: 100i
Field |
Description |
Status codes |
Status codes: · * – valid—Valid route. · > – best—Optimal route. · d – dampened—Dampened route. · h – history—History route. · s – suppressed—Suppressed route. · S – stale—Stale route. · i – internal—Internal route. · e – external—External route. |
Origin |
Origin of the route: · i – IGP—Originated in the AS. The origin of routes advertised with the network command is IGP. · e – EGP—Learned through EGP. · ?– incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
Next hop IPv6 address. |
LocPrf |
Local preference value. |
PrefVal |
Preferred value of the route. |
OutLabel |
Outgoing label of the route. |
MED |
MULTI_EXIT_DISC attribute. |
Path/Ogn |
AS_PATH and ORIGIN attributes of the route: · AS_PATH attribute—Records the ASs the route has passed. · ORIGIN attribute—Identifies the origin of the route. |
# Display detailed information about BGP IPv6 unicast routes destined to network 2::/64.
<Sysname> display bgp routing-table ipv6 2:: 64
BGP local router ID: 192.168.1.135
Local AS number: 200
Paths: 2 available, 1 best
BGP routing table information of 2::/64:
From : 10.1.1.1 (192.168.1.136)
Relay nexthop : ::FFFF:10.1.1.1
Original nexthop: ::FFFF:10.1.1.1
OutLabel : NULL
AS-path : 100
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external, best
Backup route.
From : 1::1 (192.168.1.136)
Relay nexthop : 1::1
Original nexthop: 1::1
OutLabel : NULL
AS-path : 100
Origin : igp
Attribute value : MED 0, pref-val 0
State : valid, external
Table 19 Command output
Field |
Description |
Paths |
Number of routes: · available—Number of valid routes. · best—Number of optimal routes. |
Original nexthop |
Original next hop of the route. If the route was obtained from a BGP update message, the original next hop is the next hop IP address in the message. |
OutLabel |
Outgoing label of the route. |
AS-path |
AS_PATH attribute of the route. |
Origin |
Origin of the route: · igp—Originated in the AS. The origin of routes advertised with the network command is IGP. · egp—Learned through EGP. · incomplete—Unknown origin. The origin of routes redistributed from IGP protocols is INCOMPLETE. |
Attribute value |
BGP path attributes: · MED—MED value. · localpref—Local preference value. · pref-val—Preferred value. · pre—Route preference. |
State |
Current state of the route: · valid. · internal. · external. · local. · best. |
From |
IP address of the BGP peer that advertised the route. |
Relay Nexthop |
Next hop found by route recursion. If no next hop is found, this field displays not resolved. |
# Display advertisement information for the public BGP IPv6 unicast routes destined to network 2::/64.
<Sysname> display bgp routing-table ipv6 2:: 64 advertise-info
BGP local router ID: 192.168.1.136
Local AS number: 100
Paths: 1 best
BGP routing table information of 2::/64:
Advertised to peers (2 in total):
10.1.1.2
1::2
Table 20 Command output
Field |
Description |
Paths |
Number of optimal routes destined to the specified network. |
BGP routing table information of 2::/64 |
Advertisement information for BGP routes destined to network 2::/64. |
Advertised to peers (2 in total) |
Peers to which the route has been advertised, and the number of peers. |
# Display statistics for the BGP IPv6 unicast routes advertised to peer 1::1.
<Sysname> display bgp routing-table ipv6 peer 1::1 advertised-routes statistics
Advertised routes total: 1
# Display statistics for the BGP IPv6 unicast routes received from peer 1::1.
<Sysname> display bgp routing-table ipv6 peer 1::1 received-routes statistics
Received routes total: 1
Table 21 Command output
Field |
Description |
Advertised routes total |
Total number of advertised routes. |
Received routes total |
Total number of received routes. |
# Display BGP IPv6 unicast route statistics.
<Sysname> display bgp routing-table ipv6 statistics
Total number of routes: 4
Table 22 Command output
Field |
Description |
Total number of routes |
Total number of routes. |
Related commands
· ip as-path
· ip community-list
display bgp routing-table ipv6 unicast inlabel
Use display bgp routing-table ipv6 unicast inlabel to display incoming labels for BGP IPv6 unicast routing information.
Syntax
display bgp routing-table ipv6 [ unicast ] inlabel
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command displays incoming labels for BGP IPv6 unicast routing information regardless of whether or not the unicast keyword is specified.
Examples
# Display incoming labels for all BGP IPv6 unicast routing information.
<Sysname> display bgp routing-table ipv6 inlabel
Total number of routes: 2
BGP local router ID is 2.2.2.2
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* > Network : 1::1 PrefixLen : 128
NextHop : 10::1 OutLabel : NULL
InLabel : 1279
* > Network : 10:: PrefixLen : 64
NextHop : :: OutLabel : NULL
InLabel : 1278
Table 23 Command output
Field |
Description |
Status codes |
Status codes. For more information, see Table 18. |
Origin |
Origin of the route. For more information, see Table 18. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
Next hop IPv6 address. |
OutLabel |
Outgoing label of the IPv6 unicast route, which is assigned by the peer 6PE device. |
InLabel |
Incoming label of the IPv6 unicast route, which is assigned by the local 6PE device. |
display bgp routing-table ipv6 unicast outlabel
Use display bgp routing-table ipv6 unicast outlabel to display outgoing labels for BGP IPv6 unicast routing information.
Syntax
display bgp routing-table ipv6 [ unicast ] outlabel
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Usage guidelines
This command displays outgoing labels for BGP IPv6 unicast routing information regardless of whether or not the unicast keyword is specified.
Examples
# Display outgoing labels for all public BGP IPv6 unicast routes.
<Sysname> display bgp routing-table ipv6 outlabel
Total number of routes: 2
BGP local router ID is 2.2.2.2
Status codes: * - valid, > - best, d - dampened, h - history,
s - suppressed, S - stale, i - internal, e - external
Origin: i - IGP, e - EGP, ? - incomplete
* >i Network : 4::4 PrefixLen : 128
NextHop : ::FFFF:3.3.3.3 OutLabel : 1279
* >i Network : 20:: PrefixLen : 64
NextHop : ::FFFF:3.3.3.3 OutLabel : 1278
Table 24 Command output
Field |
Description |
Status codes |
Status codes. For more information, see Table 18. |
Origin |
Origin of the route. For more information, see Table 18. |
Network |
Destination network address. |
PrefixLen |
Prefix length of the destination network address. |
NextHop |
Next hop IPv6 address. |
OutLabel |
Outgoing label of the IPv6 unicast route, which is assigned by the peer 6PE device. |
display bgp update-group
Use display bgp update-group to display information about BGP update groups.
Syntax
display bgp update-group ipv4 [ mdt ] [ ip-address ]
display bgp update-group ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ ip-address ]
display bgp update-group ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ ipv6-address ]
display bgp update-group ipv6 [ unicast ] [ ip-address ]
display bgp update-group vpnv4 [ vpn-instance vpn-instance-name ] [ ip-address ]
display bgp update-group { l2vpn | vpnv6 } [ ip-address ]
Views
Any view
Predefined user roles
network-admin
network-operator
mdc-admin
mdc-operator
Parameters
ipv4: Displays BGP update group information for IPv4 address family.
ipv6: Displays BGP update group information for IPv6 address family.
mdt: Displays BGP update group information for MDT address family. If you do not specify this keyword, the command displays update group information for unicast address family.
vpnv4: Displays BGP update group information for VPNv4 address family.
l2vpn: Displays BGP update group information for L2VPN address family.
vpnv6: Displays BGP update group information for VPNv6 address family.
unicast: Displays BGP update group information for unicast address family.
vpn-instance vpn-instance-name: Displays BGP update group information for the MPLS L3VPN instance specified by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command displays update group information for the public network.
ip-address: Displays BGP update group information for the specified BGP peer.
ipv6-address: Displays BGP update group information for the specified IPv6 BGP peer.
Usage guidelines
The update group feature classifies BGP peers that have the same export policy into an update group. When BGP advertises routes to the peers in the update group, it uses the export policy to filter the routes and generates route updates for all the peers only once.
With this feature, BGP performs one-time policy filtering and encapsulation for a prefix before advertising the prefix to all the peers in the update group. For example, BGP advertises 1000 prefixes to 1000 peers that have the same export policy (in data centers for example). Without the update group feature, BGP matches the export policy 1000 × 1000 times. With the update group feature, BGP matches the export policy only 1000 × 1 times, improving encapsulation efficiency 1000 times.
If you do not specify any parameters, this command displays all update groups for the specified address family on the public network.
By default, the unicast keyword is used.
Examples
# Display information about all public BGP update groups for IPv4 unicast address family.
<Sysname> display bgp update-group ipv4
Update-group ID: 0
Type: EBGP link
4-byte AS number: Supported
Minimum time between advertisements: 30 seconds
OutQ: 0
Members: 1
99.1.1.1
# Display update group information for the BGP IPv4 unicast peer 1.1.1.2 on the public network.
<Sysname> display bgp update-group ipv4 1.1.1.2
Update-group ID: 0
Type: EBGP link
4-byte AS number: Supported
Minimum time between advertisements: 30 seconds
OutQ: 0
Members: 2
1.1.1.2
1.1.1.3
# Display update group information for the BGP VPNv4 peer 1.1.1.2 in VPN instance vpn1.
<Sysname> display bgp update-group vpnv4 vpn-instance vpn1 1.1.1.2
Update-group ID: 0
Type: EBGP link
4-byte AS number: Supported
Nesting VPN: vpn1
Minimum time between advertisements: 30 seconds
OutQ: 0
Members: 2
1.1.1.2
1.1.1.3
# Display all update group information for the BGP L2VPN address family.
<Sysname> display bgp update-group l2vpn
Update-group ID: 0
Type: IBGP link
4-byte AS number: Supported
L2VPN signaling (VPLS): Supported
L2VPN signaling (VPWS): RFC mode
L2VPN auto-discovery: RFC mode
Minimum time between advertisements: 15 seconds
OutQ: 0
Members: 2
2.2.2.9
3.3.3.9
# Display update group information for the BGP L2VPN peer 1.1.1.3.
<Sysname> display bgp update-group l2vpn 1.1.1.3
Update-group ID: 0
Type: IBGP link
4-byte AS number: Supported
L2VPN signaling (VPLS): Supported
L2VPN signaling (VPWS): Draft mode
Minimum time between advertisements: 15 seconds
OutQ: 0
Members: 1
1.1.1.3
# Display update group information for the BGP L2VPN peer 1.1.1.4.
<Sysname> display bgp update-group l2vpn 1.1.1.4
Update-group ID: 0
Type: EBGP link
4-byte AS number: Supported
L2VPN signaling (VPLS): Supported
L2VPN signaling (VPWS): RFC mode
L2VPN auto-discovery: Non-standard mode
Minimum time between advertisements: 30 seconds
OutQ: 0
Members: 1
1.1.1.4
Table 25 Command output
Field |
Description |
Update-group ID |
ID of the update group. |
Type |
BGP link type: · IBGP link. · EBGP link. · Confed IBGP link—Confederation IBGP link. · Confed EBGP link—Confederation EBGP link. |
Label capability: Supported |
The peers in the update group support labeled routes. |
4-byte AS number: Supported |
4-byte AS number suppression is disabled for the peers in the update group. The peers in the update group support 4-byte AS numbers. |
4-byte AS number: Suppressed |
4-byte AS number suppression is enabled for the peers in the update group. |
Fake AS |
A fake local AS number is configured for the peers in the update group. |
Public-AS-Only: Yes |
BGP route updates advertised to the peers in the update group only carry the public AS number without the private AS number. · Yes—If a peer uses a private AS number, the AS number is used as an update group classification criterion. If a peer uses a public AS number, the AS number is not used as an update group classification criterion. · No—The AS number is not used as an update group classification criterion. |
Substitute-AS: Yes |
AS number substitution is enabled. |
Minimum time between advertisements: number seconds |
Minimum time between advertisements. |
Advertising community: Yes |
Community advertisement to peers in the update group is enabled. |
Route-reflect client: Yes |
The peer is a client of the route reflector. |
Advertising extended community: Yes |
Extended community advertisement to peers in the update group is enabled. |
Export AS-path-ACL |
AS path ACL used to filter BGP routes advertised to peers in the update group. |
Export prefix list |
Prefix list used to filter BGP routes advertised to peers in the update group. |
Export route policy |
Routing policy used to filter BGP routes advertised to peers in the update group. |
Export filter-policy |
ACL used to filter BGP routes advertised to peers in the update group. |
OutQ |
Number of prefixes to be advertised to peers in the update group. |
Members |
Number and IP addresses of peers in the update group. |
L2VPN signaling (VPLS): Supported |
Peers in the update group support using NLRI defined in RFC 4761 to advertise VPLS label blocks. |
L2VPN signaling (VPWS): RFC mode |
Peers in the update group support using NLRI defined in RFC 4761 to advertise MPLS L2VPN label blocks. |
L2VPN signaling (VPWS): Draft mode |
Peers in the update group support using NLRI defined in the draft draft-kompella-ppvpn-l2vpn-03 to advertise MPLS L2VPN label blocks. |
L2VPN auto-discovery: RFC mode |
Peers in the update group support using NLRI defined in RFC 6074 to exchange VPLS PE information. |
L2VPN auto-discovery: Non-standard mode |
Peers in the update group support using non-standard NLRI to exchange VPLS PE information. |
ebgp-interface-sensitive
Use ebgp-interface-sensitive to enable quick re-establishment of direct EBGP sessions.
Use undo ebgp-interface-sensitive to disable this feature.
Syntax
ebgp-interface-sensitive
undo ebgp-interface-sensitive
Default
Quick re-establishment of direct EBGP sessions is enabled.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When a direct link to an EBGP peer fails, BGP tears down the session and re-establishes a session to the peer immediately. If this feature is not enabled, the router does not tear down the session until the holdtime expires. However, disabling this feature can prevent routing flaps from affecting EBGP session state.
This command applies only to direct EBGP sessions.
Examples
# Enable quick re-establishment of direct EBGP sessions.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ebgp-interface-sensitive
fast-reroute route-policy
Use fast-reroute route-policy to apply a routing policy to fast reroute (FRR) for a BGP address family.
Use undo fast-reroute route-policy to restore the default.
Syntax
fast-reroute route-policy route-policy-name
undo fast-reroute route-policy
Default
No routing policy is applied to FRR.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
You can use the following methods to configure BGP FRR:
· Method 1—Execute the pic command in BGP address family view. BGP calculates a backup next hop for a BGP route in the address family if there are two or more unequal-cost routes to reach the destination.
· Method 2—Execute the fast-reroute route-policy command to use a routing policy in which a backup next hop is specified by using the command apply [ ipv6 ] fast-reroute backup-nexthop. For BGP to generate a backup next hop for the primary route, the backup next hop calculated by BGP must be the same as the specified backup next hop. You can also configure if-match clauses in the routing policy to identify the routes protected by FRR.
If both methods are configured, Method 2 takes precedence over Method 1.
Examples
# Apply the routing policy frr-policy to FRR in BGP IPv4 unicast address family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4
[Sysname-bgp-ipv4] fast-reroute route-policy frr-policy
Related commands
· apply fast-reroute
· apply ipv6 fast-reroute
· pic
· route-policy
filter-policy export
Use filter-policy export to filter advertised BGP routes.
Use undo filter-policy export to remove the route filter.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
filter-policy { acl-number | prefix-list prefix-list-name } export [ protocol process-id ]
undo filter-policy export [ protocol process-id ]
In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view/BGP VPNv6 address family view:
filter-policy { acl6-number | prefix-list ipv6-prefix-name } export [ protocol process-id ]
undo filter-policy export [ protocol process-id ]
Default
Advertised BGP routes are not filtered.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies an IPv4 ACL by its number in the range of 2000 to 3999, to match routes by destination.
acl6-number: Specifies an IPv6 ACL by its number in the range of 2000 to 3999, to match routes by destination.
prefix-list prefix-list-name: Specifies an IPv4 prefix list by its name, a case-sensitive string of 1 to 63 characters, to match routes by destination.
prefix-list ipv6-prefix-name: Specifies an IPv6 prefix list by its name, a case-sensitive string of 1 to 63 characters, to match routes by destination.
protocol: Filters routes redistributed from the routing protocol.
· In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view, it can be direct, isis, ospf, rip, or static.
· In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view/BGP VPNv6 address family view, it can be direct, isisv6, ospfv3, ripng, or static.
process-id: Specifies a routing protocol by its ID in the range of 1 to 65535.
· In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view, it is available only when the protocol is isis, ospf, or rip.
· In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view/BGP VPNv6 address family view, it is available only when the protocol is isisv6, ospfv3, or ripng.
Usage guidelines
If you specify a protocol, this command filters only routes redistributed from the specified protocol. If you do not specify a protocol, this command filters all advertised routes, including the following routes:
· Redistributed from IGP.
· Injected by the network command.
· Learned from BGP peers.
The following guidelines apply when you use an ACL in the command:
· To filter routes with a destination address, use one of the following:
¡ A basic ACL (2000 to 2999).
¡ An advanced ACL that contain rules defined with the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command.
· To filter routes with a destination address and mask, use an advanced ACL that contains rules defined with the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command.
· If an ACL is used, BGP advertises only routes that match a permit rule in the ACL.
The sour-addr sour-wildcard argument combination matches the destination address of a route without matching the mask in the route.
The dest-addr dest-wildcard argument combination matches the subnet mask of the route without matching the destination address in the route. The dest-wildcard must be contiguous. Otherwise, the ACL rule does not take effect.
Examples
# In BGP IPv4 unicast address family view, use ACL 2000 to filter advertised BGP IPv4 routes.
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] filter-policy 2000 export
# In BGP-VPN IPv6 unicast address family view, use ACL 2000 to filter advertised BGP IPv6 routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] filter-policy 2000 export
# Configure ACL 3000 to permit only route 113.0.0.0/16 to pass, and use ACL 3000 to filter advertised BGP routes.
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0
[Sysname-acl-adv-3000] rule 100 deny ip
[Sysname-acl-adv-3000] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] filter-policy 3000 export
Related commands
· filter-policy import
· peer as-path-acl
· peer filter-policy
· peer prefix-list
· peer route-policy
filter-policy import
Use filter-policy import to filter received BGP routes.
Use undo filter-policy import to remove the filter.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
filter-policy { acl-number | prefix-list prefix-list-name } import
undo filter-policy import
In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view/BGP VPNv6 address family view:
filter-policy { acl6-number | prefix-list ipv6-prefix-name } import
undo filter-policy import
Default
Received BGP routes are not filtered.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
acl-number: Specifies an ACL by its number in the range of 2000 to 3999, to match routes by destination.
acl6-number: Specifies an ACL6 by its number in the range of 2000 to 3999, to match routes by destination.
prefix-list prefix-list-name: Specifies an IPv4 prefix list by its name, a case-sensitive string of 1 to 63 characters, to match routes by destination.
prefix-list ipv6-prefix-name: Specifies an IPv6 prefix list by its name, a case-sensitive string of 1 to 63 characters, to match routes by destination.
Usage guidelines
If you use a basic ACL (with a number from 2000 to 2999) configured with the rule [ rule-id ] { deny | permit } source source-address source-wildcard command, the command matches routes whose destination network addresses match the source-address source-wildcard argument. However, it does not match the masks of the destination addresses.
To use an advanced ACL (with a number from 3000 to 3999) in the command, configure the ACL using one of the following steps:
· To deny/permit a route with the specified destination, use the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command.
· To deny/permit a route with the specified destination and mask, use the rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command.
The source keyword specifies the destination address of a route and the destination keyword specifies the subnet mask of the destination. The subnet mask must be contiguous. Otherwise, the configuration does not take effect.
Examples
# In BGP IPv4 unicast address family view, use ACL 2000 to filter received BGP routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] filter-policy 2000 import
# In BGP-VPN IPv6 unicast address family view, use ACL6 2000 to filter received BGP routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] filter-policy 2000 import
# Configure ACL6 3000 to permit only route 113.0.0.0/16 to pass, and use ACL 3000 to filter received BGP routes.
<Sysname> system-view
[Sysname] acl number 3000
[Sysname-acl-adv-3000] rule 10 permit ip source 113.0.0.0 0 destination 255.255.0.0 0
[Sysname-acl-adv-3000] rule 100 deny ip
[Sysname-acl-adv-3000] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] filter-policy 3000 import
Related commands
· filter-policy export
· peer as-path-acl
· peer filter-policy
· peer prefix-list
· peer route-policy
graceful-restart
Use graceful-restart to enable BGP Graceful Restart (GR) capability.
Use undo graceful-restart to disable BGP GR capability.
Syntax
graceful-restart
undo graceful-restart
Default
BGP GR capability is disabled.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
GR ensures continuous forwarding when BGP restarts or an active/standby switchover occurs.
BGP peers exchange Open messages containing GR information. If both parties have GR capability, they establish a GR-capable session.
After you execute this command, the device re-establishes BGP sessions.
Examples
# Enable GR capability for BGP process 100.
[Sysname] bgp 100
[Sysname-bgp] graceful-restart
Related commands
· graceful-restart timer purge-time
· graceful-restart timer restart
· graceful-restart timer wait-for-rib
graceful-restart timer purge-time
Use graceful-restart timer purge-time to set the Routing Information Base (RIB) purge timer.
Use undo graceful-restart timer purge-time to restore the default.
Syntax
graceful-restart timer purge-time timer
undo graceful-restart timer purge-time
Default
The RIB purge timer is 480 seconds.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
timer: Sets the RIB purge timer in the range of 1 to 6000 seconds.
Usage guidelines
BGP starts the RIB purge timer when an active/standby switchover occurs or BGP restarts. If BGP route exchange is not completed before the RIB purge timer expires, the GR restarter quits the GR process. It updates the RIB with the BGP routes already learned, and removes the stale routes from RIB.
Enable BGP GR before you execute this command.
Set the RIB purge timer to be long enough to complete GR, especially when large numbers of BGP routes exist.
As a best practice, set the RIB purge timer to be greater than the timer set by the graceful-restart timer wait-for-rib command and smaller than the timer set by the protocol lifetime command.
Examples
# Set the RIB purge timer to 300 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] graceful-restart
[Sysname-bgp] graceful-restart timer purge-time 300
Related commands
· graceful-restart
· graceful-restart timer restart
· graceful-restart timer wait-for-rib
· protocol lifetime (Layer 3—IP Routing Command Reference)
graceful-restart timer restart
Use graceful-restart timer restart to set the GR timer.
Use undo graceful-restart timer restart to restore the default.
Syntax
graceful-restart timer restart timer
undo graceful-restart timer restart
Default
The GR timer is 150 seconds.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
timer: Sets the GR time in the range of 3 to 600 seconds.
Usage guidelines
The GR restarter sends the GR timer to the GR helper in an Open message. When the GR helper detects that an active/standby switchover or a BGP restart occurred on the GR restarter, the GR helper performs the following actions:
· Marks all routes learned from the GR restarter as stale.
· Starts the GR timer.
· If no BGP session is established before the GR timer expires, the GR helper removes the stale routes.
Before you configure this command, enable the BGP GR capability.
To apply a new GR timer, you must re-establish BGP sessions.
Examples
# Set the GR timer to 300 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] graceful-restart
[Sysname-bgp] graceful-restart timer restart 300
Related commands
· graceful-restart timer purge-time
· graceful-restart timer wait-for-rib
graceful-restart timer wait-for-rib
Use graceful-restart timer wait-for-rib to set the time to wait for the End-of-RIB marker.
Use undo graceful-restart timer wait-for-rib to restore the default.
Syntax
graceful-restart timer wait-for-rib timer
undo graceful-restart timer wait-for-rib
Default
The time to wait for the End-of-RIB marker is 180 seconds.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
timer: Sets the time to wait for the End-of-RIB marker, in the range of 3 to 3600 seconds.
Usage guidelines
BGP uses this timer to control the time to receive updates from the peer. The timer is not advertised to the peer.
After the GR restarter and GR helper re-establish a BGP session, they start this timer. If they do not complete route exchange before the timer expires, the GR restarter does not receive new routes. It updates its routing table and forwarding table with learned BGP routes, and the GR helper removes the stale routes.
This command controls the routing convergence speed. A smaller timer value means faster routing convergence but possibly results in incomplete routing information.
Before configuring this command, you must enable the BGP GR capability.
Examples
# Set the time to wait for the End-of-RIB marker on the local end to 100 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] graceful-restart
[Sysname-bgp] graceful-restart timer wait-for-rib 100
Related commands
· graceful-restart
· graceful-restart timer purge-time
· graceful-restart timer restart
group
Use group to create a peer group.
Use undo group to delete a peer group.
Syntax
group group-name [ external | internal ]
undo group group-name
Default
No peer group is created.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a name for the peer group, a case-sensitive string of 1 to 47 characters.
external: Creates an EBGP peer group.
internal: Creates an IBGP peer group.
Usage guidelines
In a large-scale network, many peers can use the same route selection policy. You can configure a peer group and add these peers into this group. In this way, peers can share the same policy as the peer group. When the policy of the group is modified, the modification also applies to peers in it.
If you do not specify the internal or external keyword, this command creates an IBGP peer group.
If you perform configurations on a peer group and peers of the peer group, the last configuration takes effect.
After you create a peer group, you must use the peer enable command to enable BGP to exchange routing information with the specified peer group.
Examples
# In BGP view, create an EBGP peer group test with AS number 200, and add EBGP peers 10.1.1.1 and 10.1.2.1 into the group.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] group test external
[Sysname-bgp] peer test as-number 200
[Sysname-bgp] peer 10.1.1.1 group test
[Sysname-bgp] peer 10.1.2.1 group test
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] group test external
[Sysname-bgp-vpn1] peer test as-number 200
[Sysname-bgp-vpn1] peer 10.1.1.1 group test
[Sysname-bgp-vpn1] peer 10.1.2.1 group test
# In BGP view, create an EBGP peer group test with AS number 200, and add EBGP peers 1::1 and 1::2 into the group.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] group test external
[Sysname-bgp] peer test as-number 200
[Sysname-bgp] peer 1::1 group test
[Sysname-bgp] peer 1::2 group test
# In BGP-VPN instance view, create an EBGP peer group test with AS number 200, and add EBGP peers 1::1 and 1::2 into the group.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] group test external
[Sysname-bgp-vpn1] peer test as-number 200
[Sysname-bgp-vpn1] peer 1::1 group test
[Sysname-bgp-vpn1] peer 1::2 group test
Related commands
· display bgp group
· peer enable
ignore-first-as
Use ignore-first-as to configure BGP to ignore the first AS number of EBGP route updates.
Use undo ignore-first-as to restore the default.
Syntax
ignore-first-as
undo ignore-first-as
Default
BGP checks the first AS number of a received EBGP route update. If the first AS number is neither that of the BGP peer nor a private AS number, the BGP router disconnects the BGP session to the peer.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Examples
# Configure BGP to ignore the first AS number of EBGP route updates.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ignore-first-as
import-route
Use import-route to enable BGP to redistribute routes from an IGP protocol.
Use undo import-route to disable route redistribution from an IGP protocol.
Syntax
import-route protocol [ { process-id | all-processes } [ med med-value | route-policy route-policy-name ] * ]
undo import-route protocol [ process-id | all-processes ]
Default
BGP does not redistribute IGP routes.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
protocol: Redistributes routes from an IGP protocol.
· In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view, it can be direct, isis, ospf, rip, or static.
· In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view, it can be direct, isisv6, ospfv3, ripng, or static.
process-id: Specifies a process by its ID in the range of 1 to 65535. The default is 1.
· In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view, it is available only when the protocol is isis, ospf, or rip.
· In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view, it is available only when the protocol is isisv6, ospfv3, or ripng.
all-processes: Redistributes routes from all the processes of the specified IGP protocol. In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view, this keyword takes effect only when the protocol is isis, ospf, or rip. This keyword is not supported in BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view.
med med-value: Specifies a MED value for redistributed routes, in the range of 0 to 4294967295. If you do not specify an MED, the metric of a redistributed route is used as its MED.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to filter redistributed routes or set route attributes for redistributed routes.
Usage guidelines
The import-route command cannot redistribute default IGP routes. To redistribute default IGP routes, use the default-route imported command together with the import-route command.
Only active routes can be redistributed. You can use the display ip routing-table protocol or display ipv6 routing-table protocol command to view route state information.
The ORIGIN attribute of routes redistributed by the import-route command is INCOMPLETE.
Examples
# In BGP IPv4 unicast address family view, redistribute routes from RIP process 1, and set the MED value for redistributed routes to 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] import-route rip 1 med 100
# In BGP-VPN IPv4 unicast address family view, redistribute routes from RIP process 1, and reference a routing policy imprt to exclude route 1.1.1.0/24 from route redistribution.
<Sysname> system-view
[Sysname] ip prefix-list imprt deny 1.1.1.0 24
[Sysname] ip prefix-list imprt permit 0.0.0.0 0 less-equal 32
[Sysname] route-policy imprt permit node 0
[Sysname-route-policy-imprt-0] if-match ip address prefix-list imprt
[Sysname-route-policy-imprt-0] quit
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] import-route rip 1 route-policy imprt
# In BGP IPv6 unicast address family view, redistribute routes from RIP process 1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] import-route ripng
# In BGP-VPN IPv6 unicast address family view, redistribute routes from RIP process 1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] import-route ripng
Related commands
· display ip routing-table protocol
· display ipv6 routing-table protocol
ip vpn-instance (BGP view)
Use ip vpn-instance to create an BGP-VPN instance and enter BGP-VPN instance view.
Use undo ip vpn-instance to remove an BGP-VPN instance and all its configurations.
Syntax
ip vpn-instance vpn-instance-name
undo ip vpn-instance vpn-instance-name
Default
No BGP-VPN instance exists.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
vpn-instance-name: Specifies a VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
After you create a BGP peer in BGP-VPN instance view, the BGP routes learned from the peer are added into the routing table of the specified VPN instance.
This command and all commands in BGP-VPN instance view are typically executed on provider edge (PE) or Multi-VPN-Instance CE (MCE) devices. The commands add routes learned from different sites into different VPN instances.
Before you execute this command, perform the following tasks:
· Use the ip vpn-instance command to create the VPN instance in system view.
· Use the route-distinguisher command to configure an RD for the VPN instance.
Examples
# Create a BGP-VPN instance and enter its view.
<Sysname> system-view
[Sysname] ip vpn-instance vpn1
[Sysname-vpn-instance-vpn1] route-distinguisher 100:1
[Sysname-vpn-instance-vpn1] quit
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1]
Related commands
· ip vpn-instance (system view) (MPLS Command Reference)
· route-distinguisher (MPLS Command Reference)
log-peer-change
Use log-peer-change to enable logging BGP session state changes globally.
Use undo log-peer-change to disable this feature globally.
Syntax
log-peer-change
undo log-peer-change
Default
Logging BGP session state changes is enabled globally.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
After you execute this command, BGP logs session establishment and disconnection events for the peer or peer group. To display the log information, use the display bgp peer ipv4 unicast log-info command or the display bgp peer ipv6 unicast log-info command. The logs are sent to the information center of the device. The output rules of the logs (whether to output the logs and where to output) are determined by the information center configuration. For more information about information center configuration, see Network Management and Monitoring Configuration Guide.
If you disable the logging of BGP session state changes globally, BGP does not generate logs for session establishments and disconnections.
Examples
# Enable logging session state changes globally.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] log-peer-change
Related commands
· display bgp peer
· peer log-change
log-route-flap
Use log-route-flap to enable logging for BGP route flapping.
Use undo log-route-flap to restore the default.
Syntax
log-route-flap monitor-time monitor-count [ log-count-limit | route-policy route-policy-name ] *
undo log-route-flap
Default
Logging for BGP route flapping is disabled.
Views
BGP IPv4 unicast address family view
BGP-VPN IPv4 unicast address family view
BGP IPv6 unicast address family view
BGP-VPN IPv6 unicast address family view
BGP VPNv4 address family view
BGP-VPN VPNv4 address family view
BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
monitor-time: Specifies the monitoring interval for route flapping, in the range of 1 to 600 minutes.
monitor-count: Specifies the number of route flaps for triggering a log, in the range of 2 to 8.
log-count-limit: Specifies the maximum number of logs allowed to be generated in a minute. The value range for this argument is 1 to 600, and the default value is 200.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
This feature enables BGP to generate logs for BGP route flappings that trigger log generation. The generated logs are sent to the information center. For the logs to be output correctly, you must also configure information center on the device. For more information about the information center, see Network Management and Monitoring Configuration Guide.
This command is applicable only to incoming routes of the specified address family.
Examples
# In BGP IPv4 unicast address family view, enable logging for BGP route flapping. Set the monitoring interval to 10 minutes, the number of route flaps for triggering a log to 5, and the maximum number of allowed logs in a minute to 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] log-route-flap 10 5 100
network
Use network to inject a network to the BGP routing table.
Use undo network to remove the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view:
network ip-address [ mask | mask-length ] [ route-policy route-policy-name ]
undo network ip-address [ mask | mask-length ]
In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view:
network ipv6-address prefix-length [ route-policy route-policy-name ]
undo network ipv6-address prefix-length
Default
BGP does not advertise any local network.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies an IPv4 network address. If you do not specify the mask or mask-length, natural mask is used.
mask: Specifies a mask in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
ipv6-address: Specifies an IPv6 network address.
prefix-length: Specifies a prefix length in the range of 0 to 128.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to filter routes or set the route attributes.
Usage guidelines
The network to be injected must be available and active in the local IP routing table.
The ORIGIN attribute of the route injected with the network command is IGP.
When you execute the undo network command, you must specify the same mask or mask length/prefix length that you specified for the network command. Otherwise, the configuration cannot be removed.
Examples
# In BGP IPv4 unicast address family view, inject local network 10.0.0.0/16 to the BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] network 10.0.0.0 255.255.0.0
# In BGP-VPN IPv4 unicast address family view, inject local network 10.0.0.0/16 to the BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] network 10.0.0.0 255.255.0.0
# In BGP IPv6 unicast address family view, inject local network 2002::/64 to the IPv6 BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] network 2002:: 64
# In BGP-VPN IPv6 unicast address family view, inject local network 2002::/64 to the IPv6 BGP routing table.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] network 2002:: 64
network short-cut
Use network short-cut to increase the preference for a received EBGP route. This EBGP route is called shortcut route.
Use undo network short-cut to cancel the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view:
network ip-address [ mask | mask-length ] short-cut
undo network ip-address [ mask | mask-length ] short-cut
In BGP IPv6 unicast address family view/BGP-VPN IPv6 unicast address family view:
network ipv6-address prefix-length short-cut
undo network ipv6-address prefix-length short-cut
Default
A received EBGP route has a preference of 255.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies an IPv4 network address. If you do not specify the mask or mask-length, natural mask is used.
mask: Specifies a mask of the network address in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
ipv6-address: Specifies an IPv6 network address.
prefix-length: Specifies a prefix length in the range of 0 to 128.
Usage guidelines
Different routing protocols might find different routes to the same destination. However, not all of those routes are optimal. For route selection, routing protocols, direct routes, and static routes are assigned different preferences. The route with the highest preference is preferred.
By default, the preference of an EBGP route is lower than a local route. If a device has an EBGP route and a local route to reach the same destination, the device does not select the EBGP route. You can use the network shortcut command to configure the EBGP route to have the same preference as the local route so the EBGP route is more likely to become the optimal route.
You can use the preference command to modify the preferences for external and local BGP routes.
Examples
# In BGP IPv4 unicast address family view, increase the preference of EBGP route 10.0.0.0/16.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] network 10.0.0.0 255.255.0.0 short-cut
# In BGP-VPN IPv6 unicast address family view, increase the preference of EBGP route 10::/16.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] network 10:: 16 short-cut
Related commands
preference
non-stop-routing
Use non-stop-routing to enable BGP nonstop routing (NSR).
Use undo non-stop-routing to disable BGP NSR.
Syntax
non-stop-routing
undo non-stop-routing
Default
BGP NSR is disabled.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
BGP NSR ensures continuous routing by synchronizing BGP state and data information from the active BGP process to the standby BGP process. The standby BGP process can seamlessly take over all services when the active process fails.
Examples
# Enable BGP NSR.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] non-stop-routing
Related commands
display bgp non-stop-routing status
peer advertise-community
Use peer advertise-community to advertise the COMMUNITY attribute to a peer or peer group.
Use undo peer advertise-community to disable the COMMUNITY attribute advertisement to a peer or peer group.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } advertise-community
undo peer { group-name | ip-address [ mask-length ] } advertise-community
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise-community
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise-community
Default
No COMMUNITY attribute is advertised to any peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command advertises the COMMUNITY attribute to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command advertises the COMMUNITY attribute to all dynamic peers in the subnet.
Usage guidelines
The COMMUNITY attribute is a group of specific data carried in update messages. A route can carry one or more COMMUNITY attribute values (each is represented by a 4-byte integer). The receiving router processes the route (for example, determining whether to advertise the route and the scope for advertising the route) based on the COMMUNITY attribute values.
After you execute the peer advertise-community command, routing updates advertised to the peer carry the COMMUNITY attribute.
After you execute the undo peer advertise-community command, BGP, upon receiving a route with the COMMUNITY attribute, removes the COMMUNITY attribute before sending the route to the peer or peer group.
Examples
# In BGP IPv4 unicast address family view, advertise the COMMUNITY attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test advertise-community
# In BGP-VPN IPv4 unicast address family view, advertise the COMMUNITY attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test advertise-community
# In BGP IPv6 unicast address family view, advertise the COMMUNITY attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test advertise-community
Related commands
· apply community
· if-match community
· ip community-list
peer advertise-ext-community
Use peer advertise-ext-community to advertise the extended community attribute to a peer or peer group.
Use undo peer advertise-ext-community to disable the extended community attribute advertisement to a peer or peer group.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view:
peer { group-name | ip-address [ mask-length ] } advertise-ext-community
undo peer { group-name | ip-address [ mask-length ] } advertise-ext-community
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise-ext-community
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } advertise-ext-community
Default
No extended community attribute is advertised to a peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command advertises the extended community attribute to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command advertises the extended community attribute to all dynamic peers in the subnet.
Usage guidelines
To meet increasing user demands, BGP defines a new attribute—extended community attribute. The extended community attribute has the following advantages over the COMMUNITY attribute:
· The extended community attribute has an 8-byte length.
· The extended community attribute supports various types. You can select an extended community attribute type as needed to implement route filtering and control. This simplifies configuration and management.
After you execute the peer advertise-ext-community command, route updates sent to the peer or peer group carry the extended community attribute.
After you execute the undo peer advertise-ext-community command, BGP, upon receiving a route with the extended community attribute, removes the extended community attribute before sending the route to the peer or peer group.
Examples
# In BGP IPv4 unicast address family view, advertise the extended community attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test advertise-ext-community
# In BGP-VPN IPv4 unicast address family view, advertise the extended community attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test advertise-ext-community
# In BGP IPv6 unicast address family view, advertise the extended community attribute to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test advertise-ext-community
Related commands
· apply extcommunity
· if-match extcommunity
· ip extcommunity-list
peer allow-as-loop
Use peer allow-as-loop to allow a local AS number to exist in the AS_PATH attribute of routes from a peer or peer group, and to set the number of times the local AS number can appear.
Use undo peer allow-as-loop to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP L2VPN address family view:
peer { group-name | ip-address [ mask-length ] } allow-as-loop [ number ]
undo peer { group-name | ip-address [ mask-length ] } allow-as-loop
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } allow-as-loop [ number ]
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } allow-as-loop
In BGP VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } allow-as-loop [ number ]
undo peer { group-name | ipv6-address [ prefix-length ] } allow-as-loop
Default
The local AS number is not allowed to exist in the AS_PATH attribute of routes from a peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP-VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP L2VPN address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP allows a local AS number to exist in the AS_PATH attribute of routes from all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP allows a local AS number to exist in the AS_PATH attribute of routes from all dynamic peers in the subnet.
number: Sets the number of times for which the local AS number can appear, in the range of 1 to 10. The default number is 1. If the number of times for which the local AS number appears in a route is more than the specified number, BGP considers that a routing loop occurs and discards the route.
Usage guidelines
By default, BGP does not receive routes that contain the local AS number in the AS_PATH attribute to avoid routing loops. However, in some network environments, the AS_PATH attribute of a route from a peer must be allowed to contain the local AS number (for example, a Hub&Spoke network in MPLS L3VPN). Otherwise, the route cannot be advertised correctly.
Examples
# In BGP IPv4 unicast address family view, set the number of times the local AS number can appear in AS_PATH attribute of routes from peer group test to 2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test allow-as-loop 2
# In BGP VPNv4 address family view, set the number of times the local AS number can appear in AS_PATH attribute of routes from peer group test to 2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] peer test allow-as-loop 2
# In BGP-VPN IPv6 unicast address family view, set the number of times the local AS number can appear in AS_PATH attribute of routes from peer group test to 2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test allow-as-loop 2
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family l2vpn
[Sysname-bgp-l2vpn] peer test allow-as-loop 2
peer as-number (for a BGP peer group)
Use peer as-number to specify an AS number for a peer group.
Use undo peer as-number to delete the AS number of a peer group.
Syntax
peer group-name as-number as-number
undo peer group-name as-number
Default
No AS number is specified for a peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a name for a peer group, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
as-number: Specifies an AS number for a peer group, in the range of 1 to 4294967295.
Usage guidelines
This command applies only to a peer group with no peers in it.
When you specify an AS number for a peer group and want to add peers to it, make sure the AS number of the peers is the same as the peer group.
If you have specified no AS number for a peer group, peers added to it can use their own AS numbers.
Examples
# In BGP view, specify the AS number for peer group test as 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test as-number 100
# In BGP-VPN instance view, specify the AS number for peer group test as 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test as-number 100
Related commands
· peer enable
· peer group
peer as-number (for a BGP peer)
Use peer as-number to create a BGP peer and specify its AS number.
Use undo peer to delete a BGP peer.
Syntax
peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] } as-number as-number
undo peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] }
Default
No BGP peer is created.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies the IP address of a peer.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command enables BGP to establish dynamic peer relationships with all devices in the subnet.
ipv6-address: Specifies the IPv6 address of a peer.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command enables BGP to establish dynamic peer relationships with all devices in the subnet.
as-number: Specifies an AS number for the peer, in the range of 1 to 4294967295. If the AS numbers of the peer and the local router are the same, the peer is an IBGP peer. If they are different, the peer is an EBGP peer.
Usage guidelines
You can also create a peer and add it to a peer group by using the peer group command.
To modify the AS number of a peer, do not execute the peer as-number command repeatedly. Instead, you must first delete the peer and configure it again.
After you create a peer, you must use the peer enable command to enable BGP to exchange routing information with the specified peer.
You must use the peer connect-interface command to specify a source interface for TCP connections to a peer or peers when the following situations occur:
· The peer uses an IPv6 link-local address.
· The peers are in an IPv6 network that uses a link-local address.
The specified source interface must be the interface to which the link-local address belongs.
Examples
# In BGP view, create BGP peer 1.1.1.1 and specify its AS number as 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
# In BGP-VPN instance view, create BGP peer 1::1 and specify its AS number as 100.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 as-number 100
Related commands
· display bgp peer ipv4 unicast
· display bgp peer ipv6 unicast
· peer enable
· peer group
peer as-path-acl
Use peer as-path-acl to specify an AS path list to filter routes incoming from or outgoing to a peer or peer group.
Use undo peer as-path-acl to remove the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } as-path-acl as-path-acl-number { export | import }
undo peer { group-name | ip-address [ mask-length ] } as-path-acl { export | import }
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } as-path-acl as-path-acl-number { export | import }
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } as-path-acl { export | import }
Default
No AS path list is specified for filtering.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP-VPNv4 address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IPv4 address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies an AS path list to filter routes incoming from or outgoing to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies an AS path list to filter routes incoming from or outgoing to all dynamic peers in the subnet.
as-path-acl-number: Specifies an AS path list by its number in the range of 1 to 256.
export: Filters outgoing routes.
import: Filters incoming routes.
Usage guidelines
The specified AS path list must have been created with the ip as-path command in system view. Otherwise, all routes can pass the AS path list.
Examples
# In BGP IPv4 unicast address family view, specify the AS path list 1 to filter routes outgoing to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test as-path-acl 1 export
# In BGP-VPN IPv4 unicast address family view, specify the AS path list 1 to filter routes outgoing to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test as-path-acl 1 export
# In BGP IPv6 unicast address family view, specify the AS path list 1 to filter routes outgoing to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test as-path-acl 1 export
Related commands
· filter-policy export
· filter-policy import
· ip as-path
· peer filter-policy
· peer prefix-list
· peer route-policy
peer bfd
Use peer bfd to enable BFD for the link to a BGP peer.
Use undo peer bfd to restore the default.
Syntax
peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] } bfd [ multi-hop | single-hop ]
undo peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] } bfd
Default
BFD is disabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command enables BFD for links to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command enables BFD for links to all dynamic peers in the subnet.
multi-hop: Enables multi-hop BFD.
single-hop: Enables single-hop BFD.
Usage guidelines
When you do not specify the multi-hop keyword or the single-hop keyword:
· If an IBGP peer is specified, this command enables multi-hop BFD for the IBGP peer.
· If a directly connected EBGP peer is specified and the peer ebgp-max-hop command is not configured, this command enables single-hop BFD for the EBGP peer. If the EBGP peer is not directly connected or the peer ebgp-max-hop command is configured, this command enables multi-hop BFD for the EBGP peer.
For more information about multi-hop and single-hop BFD, see High Availability Configuration Guide.
BFD helps speed up BGP routing convergence upon link failures. However, if you have enabled GR, use BFD with caution. BFD might detect a failure before the system performs GR, resulting in GR failure. If you have enabled both BFD and GR for BGP, do not disable BFD during a GR process to avoid GR failure.
To establish a BFD session to a BGP peer, you must configure the same BFD detection mode multi-hop or single-hop on the local router and the BGP peer.
Examples
# In BGP view, enable BFD for the link to BGP peer 1.1.1.1.
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 bfd
# In BGP view, enable BFD for the link to BGP peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1::1 bfd
# In BGP-VPN instance view, enable BFD for the link to BGP peer 2.2.2.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 2.2.2.2 bfd
# In BGP-VPN instance view, enable BFD for the link to BGP peer 2::2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 2::2 bfd
Related commands
· display bgp peer
· display bfd session (High Availability Command Reference)
peer capability-advertise conventional
Use peer capability-advertise conventional to disable the BGP multi-protocol extension, route refresh, and 4-byte AS number features for a peer or peer group.
Use undo peer capability-advertise conventional to enable the BGP multi-protocol extension, route refresh, and 4-byte AS number features for a peer or peer group.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise conventional
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise conventional
Default
The BGP multi-protocol extension, route refresh, and 4-byte AS number features are enabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command disables BGP multi-protocol extension and route refresh for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command disables BGP multi-protocol extension and route refresh for all dynamic peers in the subnet.
Usage guidelines
The route refresh feature enables BGP to send and receive Route-refresh messages and implement BGP session soft-reset.
The multi-protocol extension feature enables BGP to advertise and receive routing information for various protocols (for example, IPv6 routing information).
The 4-byte AS number feature enables BGP to use 4-byte AS numbers in the range of 1 to 4294967295.
If both the peer capability-advertise conventional and peer capability-advertise route-refresh commands are executed, the most recent configuration takes effect.
Examples
# In BGP view, disable the multi-protocol extension, route refresh, and 4-byte AS number features for peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] peer 1.1.1.1 capability-advertise conventional
# In BGP-VPN instance view, disable the multi-protocol extension, route refresh, and 4-byte AS number features for peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 as-number 100
[Sysname-bgp-vpn1] peer 1::1 capability-advertise conventional
· display bgp peer
· peer capability-advertise route-refresh
peer capability-advertise route-refresh
Use peer capability-advertise route-refresh to enable BGP route refresh for a peer or peer group.
Use undo peer capability-advertise route-refresh to disable this feature.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise route-refresh
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise route-refresh
Default
BGP route refresh is enabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command enables BGP route refresh for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command enables BGP route refresh for all dynamic peers in the subnet.
Usage guidelines
The route refresh feature enables BGP to send and receive Route-refresh messages.
BGP uses the route refresh feature to implement BGP session soft-reset. After a policy is modified, the router advertises a Route-refresh message to the peers. The peers resend their routing information to the router. After receiving the routing information, the router filters the routing information by using the new policy. This method allows you to refresh the BGP routing table and apply the new route selection policy without tearing down BGP sessions.
BGP route refresh requires that both the local router and the peer support route refresh.
If both the peer capability-advertise route-refresh and peer capability-advertise conventional commands are executed, the last configuration takes effect.
Examples
# In BGP view, enable BGP route refresh for peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] peer 1.1.1.1 capability-advertise route-refresh
# In BGP-VPN instance view, enable BGP route refresh for peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 as-number 200
[Sysname-bgp-vpn1] peer 1::1 capability-advertise route-refresh
Related commands
· display bgp peer
· peer capability-advertise conventional
· peer keep-all-routes
· refresh bgp
peer capability-advertise suppress-4-byte-as
Use peer capability-advertise suppress-4-byte-as to enable 4-byte AS number suppression.
Use undo peer capability-advertise suppress-4-byte-as to disable this feature.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise suppress-4-byte-as
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } capability-advertise suppress-4-byte-as
Default
The 4-byte AS number suppression feature is disabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command enables 4-byte AS number suppression for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command enables 4-byte AS number suppression for all dynamic peers in the subnet.
Usage guidelines
BGP supports 4-byte AS numbers. The 4-byte AS number occupies four bytes, in the range of 1 to 4294967295. By default, a device sends an Open message to the peer device for session establishment. The Open message indicates that the device supports 4-byte AS numbers. If the peer device supports 2-byte AS numbers instead of 4-byte AS numbers, the session cannot be established. To resolve this issue, enable the 4-byte AS number suppression feature. The device then sends an Open message to inform the peer that it does not support 4-byte AS numbers, so the BGP session can be established.
If the peer device supports 4-byte AS numbers, do not enable the 4-byte AS number suppression feature. Otherwise, the BGP session cannot be established.
Examples
# In BGP view, enable 4-byte AS number suppression for peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 100
[Sysname-bgp] peer 1.1.1.1 capability-advertise suppress-4-byte-as
# In BGP-VPN instance view, enable 4-byte AS number suppression for peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1.1.1.1 as-number 200
[Sysname-bgp-vpn1] peer 1.1.1.1 capability-advertise suppress-4-byte-as
Related commands
display bgp peer
peer connect-interface
Use peer connect-interface to specify a source interface (IP address/IPv6 address) for establishing TCP connections to a peer or peer group.
Use undo peer connect-interface to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } connect-interface interface-type interface-number
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } connect-interface
Default
BGP uses the primary IP or IPv6 address of the egress interface in the optimal route destined for the BGP peer or peer group as the source address. The address is used to establish a TCP connection to the peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies a source interface for establishing TCP connections to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies a source interface for establishing TCP connections to all dynamic peers in the subnet.
interface-type interface-number: Specifies an interface by its type and number.
Usage guidelines
If the peer's IP address or IPv6 address belongs to an interface indirectly connected to the local router, specify that interface as the source interface for TCP connections on the peer. For example, interface A on the local end is directly connected to interface B on the peer. If you use the peer x.x.x.x as-number as-number command and x.x.x.x is not the IP address of interface B on the local end, use the peer connect-interface command on the peer to specify the interface whose IP address is x.x.x.x as the source interface.
On a BGP router that has multiple links to a peer, if the source interface fails, BGP must re-establish TCP connections. To avoid this problem, use a loopback interface as the source interface.
To establish multiple BGP sessions to a router, specify a source interface for each peer. Otherwise, the local BGP router might fail to establish TCP connections to a peer when it uses the optimal route to determine the source interface.
You must use the peer connect-interface command to specify a source interface for TCP connections to a peer or peers when the following situations occur:
· The peer uses an IPv6 link-local address.
· The peers are in an IPv6 network that uses a link-local address.
The specified source interface must be the interface to which the link-local address belongs.
The source interfaces on the local router and the peer must be reachable to each other.
To specify an indirectly connected interface (except loopback interfaces) on an EBGP peer as the source interface, use the peer ebgp-max-hop command. The command allows the establishment of an EBGP session to the indirectly connected peer.
Examples
# In BGP view, specify Loopback 0 as the source interface for TCP connections to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test connect-interface loopback 0
# In BGP-VPN instance view, specify Loopback 0 as the source interface for TCP connections to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test connect-interface loopback 0
Related commands
peer ebgp-max-hop
peer default-route-advertise
Use peer default-route-advertise to advertise a default route to a peer or peer group.
Use undo peer default-route-advertise to disable default route advertisement to a peer or peer group.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view:
peer { group-name | ip-address [ mask-length ] } default-route-advertise [ route-policy route-policy-name ]
undo peer { group-name | ip-address [ mask-length ] } default-route-advertise
In BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } default-route-advertise vpn-instance vpn-instance-name
undo peer { group-name | ip-address } default-route-advertise vpn-instance vpn-instance-name
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } default-route-advertise [ route-policy route-policy-name ]
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } default-route-advertise
Default
No default route is advertised to a peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command advertises a default route to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command advertises a default route to all dynamic peers in the subnet.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to modify the route attribute.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters.
Usage guidelines
This command enables the router to send a default route with the next hop being itself to the peer or peer group regardless of whether the default route exists in the routing table.
Examples
# In BGP IPv4 unicast address family view, advertise a default route to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test default-route-advertise
# In BGP-VPN IPv4 unicast address family view, advertise a default route to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test default-route-advertise
# In BGP IPv6 unicast address family view, advertise a default route to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test default-route-advertise
peer description
Use peer description to configure a description for a peer or peer group.
Use undo peer description to remove the description for a peer or peer group.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } description description-text
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } description
Default
No description information is configured for a peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command configures a description for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command configures a description for all dynamic peers in the subnet.
description-text: Specifies a description for a peer or peer group, a case-sensitive string of 1 to 79 characters.
Examples
# In BGP view, configure a description for the peer group test as ISP1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test description ISP1
# In BGP-VPN instance view, configure a description for the peer group test as ISP1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test description ISP1
peer ebgp-max-hop
Use peer ebgp-max-hop to enable BGP to establish an EBGP session to an indirectly connected peer or peer group and set the maximum hop count.
Use undo peer ebgp-max-hop to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ebgp-max-hop [ hop-count ]
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ebgp-max-hop
Default
BGP does not establish an EBGP session to an indirectly connected peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP establishes EBGP sessions to all indirectly connected dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP establishes EBGP sessions to all indirectly connected dynamic peers in the subnet.
hop-count: Sets the maximum number of hop counts, in the range of 1 to 255. The default is 64.
Usage guidelines
EBGP peers must be directly connected. If not, use the peer ebgp-max-hop command to establish an EBGP session over multiple hops between two peers. If direct EBGP peers use loopback interfaces to establish a BGP session, you do not need to configure the peer ebgp-max-hop command.
When the BGP GTSM feature is enabled, two peers can establish an EBGP session after passing GTSM check, regardless of whether the maximum number of hops is reached.
Examples
# In BGP view, enable BGP to establish EBGP sessions to an indirectly connected EBGP peer group test, and set the maximum hop count to 64 (default).
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test ebgp-max-hop
# In BGP-VPN instance view, enable BGP to establish EBGP sessions to an indirectly connected EBGP peer group test, and set the maximum hop count to 64 (default).
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test ebgp-max-hop
peer ttl-security
peer enable
Use peer enable to enable BGP to exchange routing information for an address family with a peer or peer group.
Use undo peer enable to disable BGP from exchanging routing information for an address family with a peer or peer group.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP-VPN VPNv4 address family view/BGP VPNv6 address family view/BGP L2VPN address family view:
peer { group-name | ip-address [ mask-length ] } enable
undo peer { group-name | ip-address [ mask-length ] } enable
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } enable
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } enable
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } enable
undo peer { group-name | ipv6-address [ prefix-length ] } enable
Default
BGP cannot exchange routing information with a peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP-VPNv4 address family view, BGP-VPN VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP-VPNv6 address family view, BGP L2VPN address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP exchanges routing information for an address family with all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP exchanges routing information for an address family with all dynamic peers in the subnet.
Usage guidelines
Executing the peer enable command in different views enables BGP to exchange routing information for the corresponding address families with the specified peer.
· In BGP IPv4 unicast address family view, the command enables the capability to exchange IPv4 unicast routing information. It also adds the learned routes to the BGP routing table of the public network.
· In BGP-VPN IPv4 unicast address family view, the command enables the capability to exchange IPv4 unicast routing information. It also adds the learned routes to the BGP routing table of the specified VPN instance.
· In BGP VPNv4 address family view, the command enables the capability to exchange VPNv4 routing information. In an MPLS L3VPN network, execute the command on PE devices in BGP VPNv4 address family view.
· In BGP-VPN VPNv4 address family view, the command enables the capability to exchange VPNv4 routing information. In a nested VPN network, execute this command on ISP PE devices in BGP-VPN VPNv4 address family view to perform the following operations:
¡ Enable the PE devices to exchange BGP VPNv4 routing information with ISP CEs.
¡ Add the VPNv4 routes learned by the PE devices to the routing table of the specified VPN instance.
· In BGP IPv6 unicast address family view, the command enables the capability to exchange IPv6 unicast routing information. It also adds the learned routes to the IPv6 BGP routing table of the public network.
· In BGP-VPN IPv6 unicast address family view, the command enables the capability to exchange IPv6 unicast routing information. It also adds the learned routes to the IPv6 BGP routing table of the specified VPN instance.
· In BGP VPNv6 address family view, the command enables the capability to exchange VPNv6 routing information. In an IPv6 MPLS L3VPN network, execute the command on PE devices in BGP VPNv6 address family view.
· In BGP L2VPN address family view, the command enables the capability to exchange L2VPN information. In an MPLS L2VPN or a VPLS network, execute the command on PE devices in BGP L2VPN address family view.
The undo peer enable command disables BGP to exchange routing information for the corresponding address family with the peer.
Examples
# In BGP IPv4 unicast address family view, enable BGP to exchange IPv4 unicast routing information with peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer 1.1.1.1 enable
# In BGP-VPN IPv4 unicast address family view, enable BGP to exchange IPv4 unicast routing information with peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer 1.1.1.1 enable
# In BGP IPv6 unicast address family view, enable BGP to exchange IPv6 unicast routing information with peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer 1.1.1.1 enable
# In BGP-VPN IPv6 unicast address family view, enable BGP to exchange IPv6 unicast routing information with peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer 1::1 enable
# In BGP L2VPN address family view, enable BGP to exchange L2VPN information with peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family l2vpn
[Sysname-bgp-l2vpn] peer 1.1.1.1 enable
Related commands
display bgp peer
peer fake-as
Use peer fake-as to advertise a fake AS number to a peer or peer group.
Use undo peer fake-as to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } fake-as as-number
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } fake-as
Default
No fake local AS number is advertised to a peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command advertises a fake AS number to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command advertises a fake AS number to all dynamic peers in the subnet.
as-number: Specifies a fake AS number in the range of 1 to 4294967295.
Usage guidelines
After you move a BGP router from an AS to another AS (from AS 2 to AS 3 for example), you have to modify the AS number of the router on all its EBGP peers. To avoid such modifications, you can configure the router to advertise a fake AS number 2 to its EBGP peers so that the EBGP peers still think that Router A is in AS 2.
The peer fake-as command is applicable only to EBGP peers or peer groups.
If you execute the peer fake-as command on the local router, specify the local router's AS number on the peer as the fake local AS number specified in the command.
Examples
# In BGP view, advertise a fake AS number of 200 to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test fake-as 200
# In BGP-VPN instance view, advertise a fake AS number of 200 to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test fake-as 200
peer filter-policy
Use peer filter-policy to filter routes advertised to or received from a peer or peer group by using an ACL.
Use undo peer filter-policy to remove the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } filter-policy acl-number { export | import }
undo peer { group-name | ip-address [ mask-length ] } filter-policy { export | import }
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } filter-policy acl6-number { export | import }
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } filter-policy { export | import }
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } filter-policy acl6-number { export | import }
undo peer { group-name | ipv6-address [ prefix-length ] } filter-policy { export | import }
In BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } filter-policy acl6-number { export | import }
undo peer { group-name | ip-address [ mask-length ] } filter-policy { export | import }
Default
No ACL-based filtering is configured.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command filters routes advertised to or received from all dynamic peers in the subnet by using an ACL.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command filters routes advertised to or received from all dynamic peers in the subnet by using an ACL.
acl-number: Specifies an ACL by its number in the range of 2000 to 3999.
acl6-number: Specifies an IPv6 ACL by its number in the range of 2000 to 3999.
export: Filters routes advertised to the peer/peer group.
import: Filters routes received from the peer/peer group.
Usage guidelines
The specified ACL referenced by the peer filter-policy command must have been created with the acl command in system view. Otherwise, all routes can pass the ACL.
If you use a basic ACL (with a number from 2000 to 2999) configured with the rule [ rule-id ] { deny | permit } source source-address source-wildcard command, the command matches routes whose destination network addresses match the source-address source-wildcard argument without matching the masks of the destination addresses.
If you use an advanced ACL (with a number from 3000 to 3999) in the command, the ACL should be configured with one of the following commands:
· The rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard command to deny/permit a route with the specified destination.
· The rule [ rule-id ] { deny | permit } ip source sour-addr sour-wildcard destination dest-addr dest-wildcard command to deny/permit a route with the specified destination and mask.
The source keyword specifies the destination address of a route and the destination keyword specifies the subnet mask of the destination. The subnet mask must be contiguous. Otherwise, the configuration does not take effect.
Examples
# In BGP IPv4 unicast address family view, apply ACL 2000 to filter routes advertised to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test filter-policy 2000 export
# In BGP-VPN IPv6 unicast address family view, apply ACL6 2000 to filter routes advertised to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test filter-policy 2000 export
Related commands
· acl (ACL and QoS Command Reference)
· filter-policy export
· filter-policy import
· peer as-path-acl
· peer prefix-list
· peer route-policy
peer group
Use peer group to add a peer to a peer group.
Use undo peer group to delete a peer from a peer group.
Syntax
peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] } group group-name [ as-number as-number ]
undo peer { ip-address [ mask-length ] | ipv6-address [ prefix-length ] } group group-name
Default
No peer exists in a peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Specifies a peer by its IP address.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command adds all dynamic peers in the subnet to a peer group.
ipv6-address: Specifies a peer by its IPv6 address.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command adds all dynamic peers in the subnet to a peer group.
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
as-number as-number: Specifies an AS for a peer by its number in the range of 1 to 4294967295.
Usage guidelines
You can add a peer to a peer group in the following ways:
· Use the peer as-number command to create a peer and specify its AS number, and then use the peer group command to add the peer to the peer group.
¡ You can specify the as-number keyword for the peer group command. The AS number must be the same as the AS number specified in the peer as-number command.
¡ If you have specified the AS number of the peer group with the peer as-number command, the peer to be added must have the same AS number as the peer group.
¡ To add a peer to an IBGP peer group, the peer must be an IBGP peer.
· Use the peer group command to create a peer and add it to the peer group.
¡ If you have specified the AS number of the peer group with the peer as-number command, you do not need to specify the as-number keyword when you execute the peer group command. This is because the AS number of the peer is the same as the peer group. To specify the as-number keyword for the peer group command, make sure the AS number is the same as the peer group.
¡ If no AS number is specified for an EBGP peer group, specify the as-number keyword when you execute the peer group command.
¡ If no AS number is specified for an IBGP peer group, you do not need to specify the as-number keyword when you execute the peer group command. This is because the AS number of the IBGP peer group is the local AS number. To specify the as-number keyword for the peer group command, make sure the AS number is the same as the local AS number.
If you have specified the AS number of a peer group with the peer as-number command, only the peers with the same AS number can be added to the peer group. All peers in the group share the same AS number. If you have not specified the AS number for a peer group, peers added to it can use their own AS numbers.
After you add a peer to a peer group, you must use the peer enable command to enable BGP to exchange routing information with the peer group.
You must use the peer connect-interface command to specify a source interface for TCP connections to a peer or peers when the following situations occur:
· The peer uses an IPv6 link-local address.
· The peers are in an IPv6 network that uses a link-local address.
The specified source interface must be the interface to which the link-local address belongs.
Examples
# In BGP view, add peer 10.1.1.1 to the EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] group test external
[Sysname-bgp] peer 10.1.1.1 group test as-number 2004
# In BGP-VPN instance view, add peer 10.1.1.1 to the EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] group test external
[Sysname-bgp-vpn1] peer 10.1.1.1 group test as-number 2004
# In BGP view, add peer 1::1 to the EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] group test external
[Sysname-bgp] peer 1::1 group test as-number 2004
# In BGP-VPN instance view, add peer 1::1 to the EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] group test external
[Sysname-bgp-vpn1] peer 1::1 group test as-number 2004
Related commands
· group
· peer as-number
· peer enable
peer ignore
Use peer ignore to disable BGP session establishment with a peer or peer group.
Use undo peer ignore to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ignore
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ignore
Default
BGP can establish a session to a peer or peer group.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP tears down sessions to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP tears down sessions to all dynamic peers in the subnet.
Usage guidelines
This command enables you to temporarily tear down the BGP session to a peer or peer group. Then you can perform network upgrade and maintenance without needing to delete and reconfigure the peer or peer group. To recover the session, execute the undo peer ignore command.
If a session has been established to a peer, executing the peer ignore command for the peer tears down the session and clears all related routing information.
If sessions have been established to a peer group, executing the peer ignore command for the peer group disables the sessions to all peers in the group and clears all related routing information.
Examples
# In BGP view, disable session establishment with peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 ignore
# In BGP-VPN instance view, disable session establishment with peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 ignore
peer ignore-originatorid
Use peer ignore-originatorid to configure BGP to ignore the ORIGINATOR_ID attribute in BGP route updates.
Use undo peer ignore-originatorid to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ignore-originatorid
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ignore-originatorid
Default
BGP does not ignore the ORIGINATOR_ID attribute in BGP route updates.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters.
ip-address: Specifies a peer by its IP address.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP ignores the ORIGINATOR_ID attribute in BGP route updates from all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP ignores the ORIGINATOR_ID attribute in BGP route updates from all dynamic peers in the subnet.
Usage guidelines
|
IMPORTANT: Before using this command, make sure it does not cause any routing loops to the network. |
By default, BGP drops incoming route updates whose ORIGINATOR_ID attribute is the same as the local router ID. Some networks such as firewall networks require BGP to accept such route updates. To meet the requirement, you must configure BGP to ignore the ORIGINATOR_ID attribute.
After you execute this command, BGP also ignores the CLUSTER_LIST attribute.
Examples
# In BGP view, configure BGP to ignore the ORIGINATOR_ID attribute in BGP route updates from the peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 ignore-originatorid
# In BGP VPN instance view, configure BGP to ignore the ORIGINATOR_ID attribute in BGP route updates from the peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 ignore-originatorid
peer ipsec-profile
Use peer ipsec-profile to apply an IPsec profile to an IPv6 BGP peer or peer group.
Use undo peer ipsec-profile to remove the profile from an IPv6 BGP peer or peer group.
Syntax
peer { group-name | ipv6-address [ prefix-length ] } ipsec-profile profile-name
undo peer { group-name | ipv6-address [ prefix-length ] } ipsec-profile
Default
No IPsec profile is applied to any IPv6 BGP peers or peer groups.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command applies an IPsec profile to all dynamic peers in the subnet.
profile-name: Specifies an IPsec profile by its name, a case-sensitive string of 1 to 63 characters.
Usage guidelines
IPsec can protect IPv6 BGP packets from data eavesdropping, tampering, and attacks caused by forged IPv6 BGP packets.
When two IPv6 BGP neighbor devices, for example Device A and Device B, are configured with IPsec, Device A encapsulates an IPv6 BGP packet with IPsec before sending it to Device B. If Device B successfully receives and decapsulates the packet, it establishes an IPv6 BGP peer relationship with Device A or learns IPv6 BGP routes to Device A. If Device B receives but fails to decapsulate the packet, or receives a packet not protected by IPsec, it discards the packet.
Configure IPsec to protect IPv6 BGP packets through the following steps:
1. Configure an IPsec transform set.
2. Configure a manual IPsec profile.
3. Execute this command to apply the IPsec profile to an IPv6 BGP peer or peer group.
For more information about IPsec transform sets and IPsec profiles, see Security Configuration Guide.
This command supports only IPsec profiles in manual mode.
If you configure IPsec on a device, you must configure IPsec on its IPv6 BGP peer. Otherwise, IPv6 BGP packets cannot be received.
Examples
# In BGP view, apply the IPsec profile profile001 to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test ipsec-profile profile001
# In BGP-VPN instance view, apply the IPsec profile profile001 to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test ipsec-profile profile001
Related commands
· display bgp group
· display bgp peer
peer keep-all-routes
Use peer keep-all-routes to save all route updates from a peer or peer group, regardless of whether the routes have passed the configured routing policy.
Use undo peer keep-all-routes to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } keep-all-routes
undo peer { group-name | ip-address [ mask-length ] } keep-all-routes
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } keep-all-routes
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } keep-all-routes
Default
Route updates from a peer or peer group are not saved.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command saves all route updates from all dynamic peers in the subnet, regardless of whether the routes have passed the configured routing policy.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command saves all route updates from all dynamic peers in the subnet, regardless of whether the routes have passed the configured routing policy.
Usage guidelines
To implement BGP session soft-reset when the local router and a peer or peer group do not support the route refresh feature, use the peer keep-all-routes command. The command saves all route updates received from the peer or peer group. After modifying the route selection policy, filter all saved routes with the new policy to refresh the routing table. This method avoids tearing down BGP sessions.
Examples
# In BGP IPv4 unicast address family view, save all route updates from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer 1.1.1.1 keep-all-routes
# In BGP-VPN IPv4 unicast address family view, save all route updates from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer 1.1.1.1 keep-all-routes
# In BGP IPv6 unicast address family view, save all route updates from peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer 1::1 keep-all-routes
Related commands
· peer capability-advertise route-refresh
· refresh bgp
peer label-route-capability
Use peer label-route-capability to enable BGP to exchange labeled routes with a peer or peer group.
Use undo peer label-route-capability to disable BGP from exchanging labeled routes with a peer or peer group.
Syntax
peer { group-name | ip-address [ mask-length ] } label-route-capability
undo peer { group-name | ip-address [ mask-length ] } label-route-capability
Default
BGP cannot exchange labeled routes with a peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP exchanges labeled routes with all dynamic peers in the subnet.
Usage guidelines
On an inter-AS option C network, use this command in BGP IPv4 unicast or BGP-VPN IPv4 unicast address family view to exchange labeled IPv4 unicast routes for inter-AS public LSP establishment.
On a 6PE network, use this command in BGP IPv6 unicast address family view to exchange labeled IPv6 unicast routes for forwarding IPv6 packets over an IPv4 network.
Examples
# In BGP IPv4 unicast address family view, enable BGP to exchange labeled IPv4 routes with peer 2.2.2.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4
[Sysname-bgp-ipv4] peer 2.2.2.2 label-route-capability
# In BGP-VPN IPv4 unicast address family view, enable BGP to exchange labeled IPv4 routes with peer 2.2.2.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer 2.2.2.2 label-route-capability
# In BGP IPv6 unicast address family view, enable BGP to exchange labeled IPv6 routes with peer 2.2.2.2.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6
[Sysname-bgp-ipv6] peer 2.2.2.2 label-route-capability
peer low-memory-exempt
Use peer low-memory-exempt to configure BGP to protect EBGP peer or peer group when the memory usage reaches level 2 threshold.
Use undo peer low-memory-exempt to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } low-memory-exempt
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } low-memory-exempt
Default
When the memory usage reaches level 2 threshold, BGP tears down an EBGP session to release memory resources periodically.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet in this command, BGP protects all dynamic peers in the subnet when the memory usage reaches level 2 threshold.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet in this command, BGP protects all dynamic peers in the subnet when the memory usage reaches level 2 threshold.
Usage guidelines
Memory usage includes the following levels of thresholds: normal, level 1, level 2, and level 3. When level 2 threshold is reached, BGP tears down an EBGP session to release memory resources periodically until the memory usage is exempt from level 2 threshold. You can use this command to avoid tearing down the BGP session to an EBGP peer when memory usage reaches level 2 threshold.
For more information about thresholds, see Fundamentals Configuration Guide.
Examples
# In BGP view, configure BGP to protect EBGP peer 1.1.1.1 when the memory usage reaches level 2 threshold.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 as-number 200
[Sysname-bgp] peer 1.1.1.1 low-memory-exempt
# In BGP-VPN instance view, configure BGP to protect EBGP peer 1.1.1.1 when the memory usage reaches level 2 threshold.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1.1.1.1 as-number 200
[Sysname-bgp-vpn1] peer 1.1.1.1 low-memory-exempt
peer next-hop-local
Use peer next-hop-local to specify the local router as the next hop for routes sent to a peer or peer group.
Use undo peer next-hop-local to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } next-hop-local
undo peer { group-name | ip-address [ mask-length ] } next-hop-local
In BGP IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } next-hop-local
undo peer { group-name | ipv6-address [ prefix-length ] } next-hop-local
Default
BGP sets the local router as the next hop for all routes sent to an EBGP peer or peer group.
BGP sets the local router as the next hop for EBGP routes sent to an IBGP peer or peer group for BGP VPNv4 address family. It does not set the local router as the next hop for EBGP routes sent to an IBGP peer or peer group for other address families.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command sets the local router as the next hop for routes sent to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command sets the local router as the next hop for routes sent to all dynamic peers in the subnet.
Usage guidelines
To ensure that an IBGP peer can find the next hop, you can use this command to specify the router as the next hop for routes sent to the IBGP peer.
Examples
# In BGP IPv4 unicast address family view, specify the router as the next hop for routes sent to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test next-hop-local
# In BGP-VPN IPv4 unicast address family view, specify the router as the next hop for routes sent to peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test next-hop-local
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test next-hop-local
peer password
Use peer password to enable MD5 authentication for a BGP peer or peer group.
Use undo peer password to remove MD5 authentication for the BGP peer or peer group.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } password { cipher | simple } password
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } password
Default
MD5 authentication is disabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command enables MD5 authentication for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command enables MD5 authentication for all dynamic peers in the subnet.
cipher: Sets a ciphertext password.
simple: Sets a plaintext password.
password: Specifies a password, a case-sensitive string of 33 to 137 characters in cipher text, or 1 to 80 characters in plain text.
Usage guidelines
You can enable MD5 authentication to enhance security using the following methods:
· Perform MD5 authentication when establishing TCP connections. Only the two parties that have the same password configured can establish TCP connections.
· Perform MD5 calculation on TCP segments to avoid modification to the encapsulated BGP packets.
For security purposes, all passwords, including passwords configured in plain text, are saved in cipher text.
Examples
# In BGP view, perform MD5 authentication on the TCP connection between the local router 10.1.100.1 and the peer router 10.1.100.2, and set the plaintext authentication password to aabbcc.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 10.1.100.2 password simple aabbcc
# Perform similar configuration on the peer.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 10.1.100.1 password simple aabbcc
# In BGP-VPN instance view, perform MD5 authentication on the TCP connection between the local router 10.1.100.1 and the peer router 10.1.100.2, and set the plaintext authentication password to aabbcc.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 10.1.100.2 password simple aabbcc
# Perform similar configuration on the peer.
<Sysname> system-view
[Sysname] bgp 200
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 10.1.100.1 password simple aabbcc
peer preferred-value
Use peer preferred-value to set a preferred value for routes received from a peer or peer group.
Use undo peer preferred-value to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } preferred-value value
undo peer { group-name | ip-address [ mask-length ] } preferred-value
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } preferred-value value
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } preferred-value
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } preferred-value value
undo peer { group-name | ipv6-address [ prefix-length ] } preferred-value
Default
The preferred value is 0.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP-VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP-VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies a preferred value for routes received from all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies a preferred value for routes received from all dynamic peers in the subnet.
value: Sets a preferred value in the range of 0 to 65535.
Usage guidelines
If multiple routes that have the same destination are learned from different peers, you can specify different preferred values for the routes as needed to control BGP path selection. The one with the greatest preferred value is selected as the optimal route to the destination.
The preferred value is used for route selection on the local router and is not advertised to the peer. It has only local significance.
You can also use the apply preferred-value command in a routing policy to configure the preferred value for BGP routes. If both the peer preferred-value and apply preferred-value commands are configured, the apply preferred-value command applies. If the preferred value is not set in the routing policy or no routing policy is configured, the peer preferred-value command applies.
Examples
# In BGP IPv4 unicast address family view, set the preferred value to 50 for routes from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer 1.1.1.1 preferred-value 50
# In BGP VPNv4 address family view, set the preferred value to 50 for routes from peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] peer 1.1.1.1 preferred-value 50
# In BGP-VPN IPv6 unicast address family view, set the preferred value to 50 for routes from peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer 1::1 preferred-value 50
· apply preferred-value
· route-policy
peer prefix-list
Use peer prefix-list to reference a prefix list to filter routes received from or advertised to a peer or peer group.
Use undo peer prefix-list to remove the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } prefix-list prefix-list-name { export | import }
undo peer { group-name | ip-address [ mask-length ] } prefix-list { export | import }
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } prefix-list ipv6-prefix-name { export | import }
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } prefix-list { export | import }
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } prefix-list ipv6-prefix-name { export | import }
undo peer { group-name | ipv6-address [ prefix-length ] } prefix-list { export | import }
In BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } prefix-list ipv6-prefix-name { export | import }
undo peer { group-name | ip-address [ mask-length ] } prefix-list { export | import }
Default
No prefix list based filtering is configured.
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IPv4 address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command references a prefix list to filter routes received from or advertised to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command references a prefix list to filter routes received from or advertised to all dynamic peers in the subnet.
prefix-list-name: Specifies an IPv4 prefix list by its name, a case-sensitive string of 1 to 63 characters.
export: Applies the filter to routes advertised to the specified peer/peer group.
import: Applies the filter to routes received from the specified peer/peer group.
Usage guidelines
The specified IPv4 prefix list or IPv6 prefix list must have been created with the ip prefix-list or ipv6 prefix-list command in system view. Otherwise, all routes can pass the IPv4/IPv6 prefix list.
Examples
# In BGP IPv4 unicast address family view, use the IPv4 prefix list list1 to filter routes advertised to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test prefix-list list1 export
# In BGP-VPN IPv6 unicast address family view, use the IPv6 prefix list list1 to filter routes advertised to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test prefix-list list1 export
Related commands
· filter-policy export
· filter-policy import
· ip prefix-list
· ipv6 prefix-list
· peer as-path-acl
· peer filter-policy
· peer route-policy
peer public-as-only
Use peer public-as-only to remove private AS numbers in BGP updates sent to an EBGP peer or peer group.
Use undo peer public-as-only to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } public-as-only
undo peer { group-name | ip-address [ mask-length ] } public-as-only
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } public-as-only
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } public-as-only
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } public-as-only
undo peer { group-name | ipv6-address [ prefix-length ] } public-as-only
Default
BGP updates sent to an EBGP peer or peer group can carry both public and private AS numbers.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command removes private AS numbers in BGP updates sent to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command removes private AS numbers in BGP updates sent to all dynamic peers in the subnet.
Usage guidelines
Private AS numbers are typically used in test networks, and need not be transmitted in public networks. The range of private AS numbers is from 64512 to 65535.
After you execute the command, you can get the following results:
· If the AS_PATH attribute of a BGP update carries only private AS numbers, the device removes the AS numbers before sending the update to the EBGP peer or peer group.
· If the AS_PATH attribute carries both public and private AS numbers, the command does not take effect. The device sends the BGP update to the EBGP peer or peer group without removing the private AS numbers.
· If the AS_PATH attribute carries AS numbers of the peer or peer group, the command does not take effect. The device sends the BGP update to the peer or peer group without removing the private AS numbers.
Examples
# In BGP IPv4 unicast address family view, remove private AS numbers in BGP updates sent to EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test public-as-only
# In BGP VPNv4 address family view, remove private AS numbers in BGP updates sent to EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] peer test public-as-only
# In BGP-VPN IPv6 unicast address family view, remove private AS numbers in BGP updates sent to EBGP peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test public-as-only
peer reflect-client
Use peer reflect-client to configure the device as a route reflector and specify a peer or peer group as a client.
Use undo peer reflect-client to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP VPNv6 address family view/BGP L2VPN address family view:
peer { group-name | ip-address [ mask-length ] } reflect-client
undo peer { group-name | ip-address [ mask-length ] } reflect-client
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } reflect-client
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } reflect-client
Default
Neither the route reflector nor the client is configured.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP VPNv6 address family view, BGP L2VPN address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command configures the device as a route reflector and specifies all dynamic peers in the subnet as clients.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command configures the device as a route reflector and specifies all dynamic peers in the subnet as clients.
Usage guidelines
Using route reflectors can solve the issue brought by too many IBGP connections. In an AS, a router acts as a route reflector, and other routers act as clients connecting to the route reflector. The route reflector forwards the routing information received from a client to other clients. In this way, all clients can receive routing information from one another without establishing BGP sessions.
Examples
# In BGP IPv4 unicast address family view, configure the local device as a route reflector and specify the IBGP peer group test as a client.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test reflect-client
# In BGP VPNv4 address family view, configure the local device as a route reflector and specify the IBGP peer group test as a client.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] peer test reflect-client
# In BGP-VPN IPv6 unicast address family view, configure the local device as a route reflector and specify the IBGP peer group test as a client.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test reflect-client
# In BGP L2VPN address family view, configure the local device as a route reflector and specify the IBGP peer group test as a client.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family l2vpn
[Sysname-bgp-l2vpn] peer test reflect-client
Related commands
· reflect between-clients
· reflector cluster-id
peer route-limit
Use peer route-limit to set the maximum number of routes that can be received from a peer or peer group.
Use undo peer route-limit to restore the default.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } route-limit prefix-number [ { alert-only | discard | reconnect reconnect-time } | percentage-value ] *
undo peer { group-name | ip-address [ mask-length ] } route-limit
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-limit prefix-number [ { alert-only | discard | reconnect reconnect-time } | percentage-value ] *
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-limit
Default
The number of routes that can be received from a peer or peer group is not limited.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies the maximum number of routes that can be received from all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies the maximum number of routes that can be received from all dynamic peers in the subnet.
prefix-number: Sets the number of routes that can be received from the peer or peer group. The value range for this argument is 1 to 4294967295. If the following conditions exist, the router will tear down the session to the peer or peer group:
· The alert-only, discard, and reconnect keywords are not specified.
· The number of routes received from the peer or peer group reaches the prefix-number.
The router will not attempt to re-establish the session to a dynamic BGP peer until the router receives a connection request from the peer. For other peers, you can use the reset bgp command to re-establish the sessions.
alert-only: If the number of routes received from the peer or peer group reaches the prefix-number, the router generates a log message instead of tearing down the session to the peer or peer group. The router can continue to receive routes from the peer or peer group.
discard: If the number of routes received from the peer or peer group reaches the prefix-number, the router retains the session to the peer or peer group. However, it discards excess routes and generates a log message. After the number of routes received from the peer or peer group falls below the prefix-number, the router can continue to receive routes from the peer or peer group. To restore the discarded routes, use the refresh bgp import command to request the peer or peer group to resend the routes.
reconnect reconnect-time: Sets a reconnect time. After the specified time is reached, the router re-establishes a session to the peer or peer group when the number of routes received from the peer or peer group reaches the prefix-number. The value range for the reconnect-time argument is 1 to 65535 seconds. This option is not available for dynamic BGP peers.
percentage-value: Sets the threshold value for the router to generate a log message (the router generates a log message when the ratio of the number of received routes to the prefix-number exceeds the percentage value). The value range of this argument is 1 to 100, and the default is 75.
Examples
# In BGP IPv4 unicast address family view, set the maximum number of routes that can be received from peer 1.1.1.1 to 10000. Configure the router to tear down the session to the peer if the number is exceeded.
<Sysname> system-view
[Sysname] bgp 109
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer 1.1.1.1 route-limit 10000
# In BGP-VPN IPv4 unicast address family view, set the maximum number of routes that can be received from peer 1.1.1.1 to 10000. Configure the router to tear down the session to the peer if the number is exceeded.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer 1.1.1.1 route-limit 10000
# In BGP IPv6 unicast address family view, set the maximum number of routes that can be received from peer 1::1 to 10000. Configure the router to tear down the session to the peer if the number is exceeded.
<Sysname> system-view
[Sysname] bgp 109
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer 1::1 route-limit 10000
peer route-policy
Use peer route-policy to apply a routing policy to routes incoming from or outgoing to a peer or peer group.
Use undo peer route-policy to remove the configuration.
Syntax
In BGP IPv4 unicast address family view/BGP-VPN IPv4 unicast address family view/BGP VPNv4 address family view/BGP VPNv6 address family view:
peer { group-name | ip-address [ mask-length ] } route-policy route-policy-name { export | import }
undo peer { group-name | ip-address [ mask-length ] } route-policy { export | import }
In BGP-VPN VPNv4 address family view:
peer { group-name | ip-address [ mask-length ] } route-policy route-policy-name import
undo peer { group-name | ip-address [ mask-length ] } route-policy import
In BGP IPv6 unicast address family view:
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-policy route-policy-name { export | import }
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-policy { export | import }
In BGP-VPN IPv6 unicast address family view:
peer { group-name | ipv6-address [ prefix-length ] } route-policy route-policy-name { export | import }
undo peer { group-name | ipv6-address [ prefix-length ] } route-policy { export | import }
Default
No routing policy is applied to routes from/to the peer or peer group.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP-VPN VPNv4 address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view, BGP VPNv6 address family view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command applies a routing policy to routes incoming from or outgoing to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command applies a routing policy to routes incoming from or outgoing to all dynamic peers in the subnet.
route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters.
export: Applies the routing policy to routes outgoing to the peer or peer group.
import: Applies the routing policy to routes incoming from the peer or peer group.
Usage guidelines
The specified routing policy must have been configured with the route-policy command in system view. Otherwise, all routes can pass the routing policy.
The if-match interface command, if configured for the referenced routing policy, does not take effect for routes.
Examples
# In BGP IPv4 unicast address family view, apply routing policy test-policy to routes outgoing to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test route-policy test-policy export
# In BGP-VPN IPv6 unicast address family view, apply the routing policy test-policy to routes outgoing to the peer group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] peer test route-policy test-policy export
Related commands
· filter-policy export
· filter-policy import
· peer as-path-acl
· peer filter-policy
· peer prefix-list
· route-policy
peer route-update-interval
Use peer route-update-interval to set an interval for sending the same update to a peer or peer group.
Use undo peer route-update-interval to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-update-interval interval
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } route-update-interval
Default
The interval for sending the same update to an IBGP peer is 15 seconds and the interval for sending the same update to an EBGP peer is 30 seconds.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command specifies an interval for sending the same update to all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command specifies an interval for sending the same update to all dynamic peers in the subnet.
interval: Sets a minimum interval for sending the same update message, in the range of 0 to 600 seconds.
Usage guidelines
A BGP router sends an update message to its peers when a route is changed. If the route changes frequently, the BGP router sends many updates for the route, resulting in routing flaps. By configuring the interval for sending the same update to a peer or peer group, you can avoid such routing flaps.
Examples
# In BGP view, set the interval for sending the same update to peer group test to 10 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test as-number 100
[Sysname-bgp] peer test route-update-interval 10
# In BGP-VPN instance view, set the interval for sending the same update to peer group test to 10 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test route-update-interval 10
peer substitute-as
Use undo peer substitute-as to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } substitute-as
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } substitute-as
Default
The AS number of a peer or peer group in the AS_PATH attribute is not replaced.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command replaces the AS number of all dynamic peers in the subnet in the AS_PATH attribute with the local AS number.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command replaces the AS number of all dynamic peers in the subnet in the AS_PATH attribute with the local AS number.
Usage guidelines
In MPLS L3VPN, if EBGP is used between PE and CE, sites in different geographical areas must have different AS numbers assigned to ensure correct route advertisement. If different CEs use the same AS number, you must configure the relevant PE to replace the AS number of the CE as its own AS number. This ensures correct advertisement of private network routes.
Examples
# In BGP view, substitute the local AS number for the AS number of peer 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer 1.1.1.1 substitute-as
# In BGP-VPN instance view, substitute the local AS number for the AS number of peer 1::1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer 1::1 substitute-as
peer timer
Use peer timer to set a keepalive interval and holdtime for a peer or peer group.
Use undo peer timer to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } timer keepalive keepalive hold holdtime
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } timer
Default
The keepalive interval is 60 seconds, and the holdtime is 180 seconds.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command configures a keepalive interval and holdtime for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command configures a keepalive interval and holdtime for all dynamic peers in the subnet.
keepalive keepalive: Sets a keepalive interval in the range of 0 to 21845 seconds.
hold holdtime: Sets a holdtime in the range of 3 to 65535 seconds. The holdtime must be at least three times the keepalive interval.
Usage guidelines
After establishing a BGP session, two routers send keepalive messages at the specified keepalive interval to each other to keep the session.
If a router receives no keepalive or update message from the peer within the holdtime, it tears down the session.
The timers configured with this command are preferred to the timers configured with the timer command.
If the holdtime settings on the local and peer routers are different, the smaller one is used.
If the holdtime is configured as 0, no keepalive message will be sent to the peer, and the peer session will never time out. If the keepalive interval is configured as 0 and the negotiated holdtime is not 0, one third of the holdtime is taken as the interval for sending keepalive messages. If neither the holdtime nor the keepalive interval is configured as 0, the actual keepalive interval is the smaller one between one third of the holdtime and the keepalive interval.
The timers configured with this command do not take effect until a session is re-established (for example, a session is reset).
Examples
# In BGP view, set the keepalive interval and holdtime for peer group test to 60 seconds and 180 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test timer keepalive 60 hold 180
# In BGP-VPN instance view, set the keepalive interval and holdtime interval for peer group test to 60 seconds and 180 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test timer keepalive 60 hold 180
# In BGP view, set both the keepalive interval and holdtime for peer group test to 0 seconds, indicating that the session will never time out.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test timer keepalive 0 hold 0
# In BGP-VPN instance view, set both the keepalive interval and holdtime for peer group test to 0 seconds, indicating that the session will never time out.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test timer keepalive 0 hold 0
Related commands
· display bgp peer
· timer
peer ttl-security
Use peer ttl-security to configure Generalized TTL Security Mechanism (GTSM) for a BGP peer or peer group.
Use undo peer ttl-security to restore the default.
Syntax
peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ttl-security hops hop-count
undo peer { group-name | ip-address [ mask-length ] | ipv6-address [ prefix-length ] } ttl-security hops
Default
GTSM is disabled for BGP.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command configures GTSM for all dynamic peers in the subnet.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command configures GTSM for all dynamic peers in the subnet.
hops hop-count: Sets the maximum number of hops to the specified peer, in the range of 1 to 254.
Usage guidelines
GTSM protects a BGP session by comparing the TTL value of an incoming IP packet against the valid TTL range. If the TTL value is within the valid TTL range, the packet is accepted. If not, the packet is discarded.
The valid TTL range is from 255 – the configured hop count + 1 to 255.
When GTSM is configured, the BGP packets sent by the device have a TTL of 255.
When GTSM is configured, the local device can establish an EBGP session to the peer after they pass GTSM check, regardless of whether the maximum number of hops is reached.
To use GTSM, you must configure GTSM on both the local and peer devices. You can specify different hop-count values for them.
Examples
# In BGP view, enable GTSM for BGP peer group test and set the maximum number of hops to the specified peer in the peer group to 1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] peer test ttl-security hops 1
# In BGP-VPN instance view, enable GTSM for BGP peer group test and set the maximum number of hops to the specified peer in the peer group to 1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] peer test ttl-security hops 1
Related commands
peer ebgp-max-hop
pic
Use pic to enable BGP FRR for a BGP address family.
Use undo pic to disable BGP FRR for a BGP address family.
Syntax
pic
undo pic
Default
BGP FRR is disabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
FRR is used in a dual-homing network to protect a primary route with a backup route. It uses ARP (for IPv4), echo-mode BFD (for IPv4), or ND (for IPv6) to detect the connectivity of the primary route. When the primary route fails, BGP directs packets to the backup route.
After you enable FRR, BGP calculates a backup route for each BGP route in the address family if there are two or more unequal-cost routes to reach the destination.
You can also configure BGP FRR by using the fast-reroute route-policy command, which takes precedence over the pic command. For more information about routing policies, see Layer 3—IP Routing Configuration Guide.
Use the pic command with caution because it might cause routing loops in specific scenarios.
Examples
# Enable BGP FRR in BGP IPv4 unicast address family view.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] pic
Related commands
preference
Use preference to set preferences for BGP routes.
Use undo preference to restore the default.
Syntax
preference { external-preference internal-preference local-preference | route-policy route-policy-name }
undo preference
Default
The preferences of external, internal, and local BGP routes are 255, 255, and 130, respectively.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP IPv6 unicast address family view, BGP-VPN IPv6 unicast address family view
Predefined user roles
network-admin
mdc-admin
Parameters
external-preference: Sets a preference for EBGP routes, in the range of 1 to 255.
internal-preference: Sets a preference for IBGP routes, in the range of 1 to 255.
local-preference: Sets a preference for local routes, in the range of 1 to 255.
route-policy route-policy-name: Specifies a routing policy by its name, a case-sensitive string of 1 to 63 characters, to set the route preference for matching routes. Routes not matching the routing policy use the default preference.
Usage guidelines
Different routing protocols might find different routes to the same destination. However, not all of those routes are optimal. For route selection, routing protocols, direct routes, and static routes are assigned different preferences. The route with the highest preference is preferred.
Configuring the preferences for BGP routes changes the possibility for the routes to become the optimal route.
To reference a routing policy to set the preference, you must configure the preference with the apply preference command in the routing policy in advance. Otherwise, all matching routes use the default preference.
Examples
# In BGP IPv4 unicast address family view, set preferences for EBGP, IBGP, and local routes to 20, 20, and 200.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] preference 20 20 200
# In BGP IPv4 unicast address family view, set the preference for BGP route 1.1.1.0/24 to 200.
<Sysname> system-view
[Sysname] ip prefix-list route permit 1.1.1.0 24
[Sysname] route-policy prefer permit node 0
[Sysname-route-policy-prefer-0] if-match ip address prefix-list route
[Sysname-route-policy-prefer-0] apply preference 200
[Sysname-route-policy-prefer-0] quit
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] preference route-policy prefer
# In BGP-VPN IPv6 unicast address family view, set preferences for EBGP, IBGP, and local routes to 20, 20, and 200.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv6 unicast
[Sysname-bgp-ipv6-vpn1] preference 20 20 200
primary-path-detect bfd
Use primary-path-detect bfd to configure BGP FRR to use BFD to detect next hop connectivity for the primary route.
Use undo primary-path-detect bfd to restore the default.
Syntax
primary-path-detect bfd echo
undo primary-path-detect bfd
Default
BGP FRR uses ARP to detect the connectivity to the next hop of the primary route.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
echo: Uses echo-mode BFD to detect the connectivity to the next hop of the primary route.
Examples
# Configure BGP FRR to use echo-mode BFD to detect next hop connectivity for the primary route.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] primary-path-detect bfd echo
Related commands
· fast-reroute route-policy
· pic
reflect between-clients
Use reflect between-clients to enable route reflection between clients.
Use undo reflect between-clients to disable this feature.
Syntax
reflect between-clients
undo reflect between-clients
Default
Route reflection between clients is enabled.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP VPNv6 address family view, BGP L2VPN address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
When a route reflector is configured, and the clients of a route reflector are fully meshed, route reflection is unnecessary because it consumes more bandwidth resources. You can use the undo reflect between-clients command to disable route reflection instead of modifying network configuration or changing network topology.
After route reflection is disabled between clients, routes can still be reflected between a client and a non-client.
Examples
# In BGP IPv4 unicast address family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] undo reflect between-clients
# In BGP VPNv4 address family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] undo reflect between-clients
# In BGP-VPN IPv4 unicast address family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] undo reflect between-clients
# In BGP IPv6 unicast address family view, disable route reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] undo reflect between-clients
# In BGP L2VPN address family view, disable L2VPN information reflection between clients.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family l2vpn
[Sysname-bgp-l2vpn] undo reflect between-clients
Related commands
· peer reflect-client
reflector cluster-id
Use reflector cluster-id to configure the cluster ID for a route reflector.
Use undo reflector cluster-id to restore the default.
Syntax
reflector cluster-id { cluster-id | ip-address }
undo reflector cluster-id
Default
A route reflector uses its router ID as the cluster ID.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view, BGP VPNv4 address family view, BGP IPv6 unicast address family view, BGP VPNv6 address family view, BGP L2VPN address family view
Predefined user roles
network-admin
mdc-admin
Parameters
cluster-id: Specifies the cluster ID in the format of an integer, in the range of 1 to 4294967295.
ip-address: Specifies the cluster ID in the format of an IPv4 address in dotted decimal notation.
Usage guidelines
The route reflector and clients form a cluster. Typically a cluster has one route reflector. The ID of the route reflector is the cluster ID.
You can configure more than one route reflector in a cluster to improve network reliability and prevent a single point of failure. Use this command to configure the same cluster ID for all route reflectors in the cluster to avoid routing loops.
Do not configure the router ID of a client as the cluster ID.
Examples
# In BGP IPv4 unicast address family view, configure the cluster ID on the local router (a reflector in the cluster) as 80.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] reflector cluster-id 80
# In BGP VPNv4 address family view, configure the cluster ID on the local router (a reflector in the cluster) as 80.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family vpnv4
[Sysname-bgp-vpnv4] reflector cluster-id 80
# In BGP-VPN IPv4 unicast address family view, configure the cluster ID on the local router (a reflector in the cluster) as 80.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] reflector cluster-id 80
# In BGP IPv6 unicast address family view, configure the cluster ID on the local router (a reflector in the cluster) as 80.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] reflector cluster-id 80
# In BGP L2VPN address family view, configure the cluster ID on the local router (a reflector in the cluster) as 80.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family l2vpn
[Sysname-bgp-l2vpn] reflector cluster-id 80
Related commands
· peer reflect-client
· reflect between-clients
refresh bgp
Use refresh bgp to manually soft-reset BGP sessions.
Syntax
refresh bgp { ip-address [ mask-length ] | all | external | group group-name | internal } { export | import } ipv4 [ unicast ] [ vpn-instance vpn-instance-name ]
refresh bgp { ipv6-address [ prefix-length ] | all | external | group group-name | internal } { export | import } ipv6 [ unicast ] [ vpn-instance vpn-instance-name ]
refresh bgp ip-address [ mask-length ] { export | import } ipv6 [ unicast ]
refresh bgp { ip-address [ mask-length ] | all | external | group group-name | internal } { export | import } vpnv4 [ vpn-instance vpn-instance-name ]
refresh bgp { ip-address [ mask-length ] | all | external | group group-name | internal } { export | import } vpnv6
refresh bgp { ip-address [ mask-length ] | all | external | group group-name | internal } { export | import } l2vpn
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ip-address: Soft-resets the BGP session to a peer specified by its IP address.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command soft-resets BGP sessions to all dynamic peers in the subnet.
ipv6-address: Soft-resets the BGP session to a peer specified by its IPv6 address.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command soft-resets BGP sessions to all dynamic peers in the subnet.
all: Soft-resets all BGP sessions.
external: Soft-resets all EBGP sessions.
group group-name: Soft-resets the BGP sessions to the peers of the specified peer group. The group-name argument refers to the name of a peer group, a case-sensitive string of 1 to 47 characters.
internal: Soft-resets all IBGP sessions.
export: Performs outbound soft-reset (filters routes advertised to the specified peer or peer group by using the new configuration).
import: Performs inbound soft-reset (filters routes received from the specified peer or peer group by using the new configuration).
ipv4: Soft-resets BGP sessions for IPv4 address family.
ipv6: Soft-resets BGP sessions for IPv6 address family.
unicast: Soft-resets BGP sessions for unicast address family.
vpnv4: Soft-resets BGP sessions for VPNv4 address family.
vpnv6: Soft-resets BGP sessions for VPNv6 address family.
l2vpn: Soft-resets BGP sessions for L2VPN address family.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command soft-resets BGP sessions for the specified address family on the public network.
Usage guidelines
A soft-reset operation enables the router to apply a new route selection policy without tearing down BGP connections.
To apply a new policy to outbound BGP sessions, execute this command with the export keyword. The router uses the new policy to filter routing information and sends the routing information that passes the filtering to the BGP peers.
To apply a new policy to inbound sessions, execute this command with the import keyword. The router advertises a route-refresh message to the peer and the peer resends its routing information to the router. After receiving the routing information, the router uses the new policy to filter the routing information.
This command requires that both the local router and the peer support route refresh.
If the peer keep-all-routes command is configured, the refresh bgp import command does not take effect.
By default, the unicast keyword is used.
Examples
# Soft-reset all inbound BGP sessions for the IPv4 unicast address family.
<Sysname> refresh bgp all import ipv4
# Soft-reset all inbound BGP sessions for the IPv6 unicast address family.
<Sysname> refresh bgp all import ipv6
· peer capability-advertise route-refresh
· peer keep-all-routes
reset bgp
Use reset bgp to reset BGP sessions for the specified address family.
Syntax
reset bgp { as-number | ip-address [ mask-length ] | all | external | group group-name | internal } ipv4 [ unicast ] [ vpn-instance vpn-instance-name ]
reset bgp { as-number | ipv6-address [ prefix-length ] | all | external | group group-name | internal } ipv6 [ unicast ] [ vpn-instance vpn-instance-name ]
reset bgp ip-address [ mask-length ] ipv6 [ unicast ]
reset bgp { as-number | ip-address [ mask-length ] | all | external | group group-name | internal } vpnv4 [ vpn-instance vpn-instance-name ]
reset bgp { as-number | ip-address [ mask-length ] | all | external | group group-name | internal } vpnv6
reset bgp { as-number | ip-address [ mask-length ] | all | external | group group-name | internal } l2vpn
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
as-number: Resets BGP sessions to peers in the AS specified by its number in the range of 1 to 4294967295.
ip-address: Resets the BGP session to a peer specified by its IP address.
mask-length: Specifies a mask length in the range of 0 to 32. You can use the ip-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command resets BGP sessions to all dynamic peers in the subnet.
ipv6-address: Resets the BGP session to a peer specified by its IPv6 address.
prefix-length: Specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command resets BGP sessions to all dynamic peers in the subnet.
all: Resets all BGP sessions.
external: Resets all EBGP sessions.
group group-name: Resets the BGP sessions to the peers in the peer group specified by its name, a case-sensitive string of 1 to 47 characters.
internal: Resets all IBGP sessions.
ipv4: Resets BGP sessions for IPv4 address family.
ipv6: Resets BGP sessions for IPv6 address family.
unicast: Resets BGP sessions for unicast address family.
vpnv4: Resets BGP sessions for VPNv4 address family.
vpnv6: Resets BGP sessions for VPNv6 address family.
l2vpn: Resets BGP sessions for L2VPN address family.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command resets BGP sessions for the specified address family on the public network.
Usage guidelines
A reset operation enables the router to apply a new route selection policy by re-establishing BGP sessions. This operation breaks down BGP sessions for a short period of time.
By default, the unicast keyword is used.
Examples
# Reset all BGP sessions for the IPv4 unicast address family.
<Sysname> reset bgp all ipv4
# Reset all BGP sessions for the IPv6 unicast address family.
<Sysname> reset bgp all ipv6
reset bgp all
Use reset bgp all to reset all BGP sessions for all address families.
Syntax
reset bgp all
Views
User view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
A reset operation enables the router to apply a new route selection policy by re-establishing BGP sessions. This operation breaks down BGP sessions for a short while.
Examples
# Reset all BGP sessions.
<Sysname> reset bgp all
reset bgp dampening
Use reset bgp dampening to clear BGP route dampening information and release suppressed BGP routes.
Syntax
reset bgp dampening ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address [ mask | mask-length ] ]
reset bgp dampening ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address prefix-length ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv4: Clears BGP IPv4 route dampening information and release suppressed BGP IPv4 routes.
ipv6: Clears BGP IPv6 route dampening information and release suppressed BGP IPv6 routes.
unicast: Clears BGP unicast route dampening information and release suppressed BGP unicast routes.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears BGP route dampening information for the public network, and releases suppressed BGP routes.
network-address: Specifies a destination network address. If you do not specify a network address, this command clears all BGP route dampening information, and releases all suppressed BGP routes.
mask: Specifies a network mask, in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
prefix-length: Specifies a prefix length in the range of 0 to 128.
Usage guidelines
When you execute the reset bgp dampening ipv4 command:
· If you specify only the network-address argument, the system ANDs the network address with the mask of a route. If the result matches the network address of the route, the command clears dampening information for the route, and releases the suppressed route.
· If you specify the network-address mask or network-address mask-length argument, this command performs the following operations:
¡ Clears dampening information for the route that matches both the specified destination network address and the mask (or mask length).
¡ Releases the suppressed route.
By default, the unicast keyword is used.
Examples
# Clear dampening information for the public BGP IPv4 unicast route to network 20.1.0.0/16, and release the suppressed route.
<Sysname> reset bgp dampening ipv4 20.1.0.0 255.255.0.0
# Clear dampening information for the public BGP IPv6 unicast route to network 2345::/16, and release the suppressed route.
<Sysname> reset bgp dampening ipv6 2345:: 16
Related commands
· dampening
· display bgp routing-table dampened
reset bgp flap-info
Use reset bgp flap-info to clear flap statistics for BGP routes.
Syntax
reset bgp flap-info ipv4 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address [ mask | mask-length ] | as-path-acl as-path-acl-number | peer ipv4-address [ mask-length ] ]
reset bgp flap-info ipv6 [ unicast ] [ vpn-instance vpn-instance-name ] [ network-address prefix-length | as-path-acl as-path-acl-number | peer ipv6-address [ prefix-length ] ]
Views
User view
Predefined user roles
network-admin
mdc-admin
Parameters
ipv4: Clears flap statistics for BGP IPv4 routes.
ipv6: Clears flap statistics for BGP IPv6 routes.
unicast: Clears flap statistics for BGP unicast routes.
vpn-instance vpn-instance-name: Specifies an MPLS L3VPN instance by its name, a case-sensitive string of 1 to 31 characters. If you do not specify a VPN instance, this command clears flap statistics for public BGP routes.
network-address: Specifies a destination network address.
mask: Specifies a network mask, in dotted decimal notation.
mask-length: Specifies a mask length in the range of 0 to 32.
prefix-length: Specifies a prefix length in the range of 0 to 128.
as-path-acl as-path-acl-number: Specifies an AS path list by its number in the range of 1 to 256, to filter BGP route flap statistics.
peer ipv4-address [ mask-length ]: Clears flap statistics for BGP routes learned from the specified IPv4 BGP peer. The mask-length argument specifies a mask length in the range of 0 to 32. You can use the ipv4-address and mask-length arguments together to specify a subnet. If you specify a subnet, this command clears flap statistics for BGP routes learned from all dynamic peers in the subnet.
peer ipv6-address [ prefix-length ]: Clears flap statistics for BGP routes learned from the specified IPv6 BGP peer. The prefix-length argument specifies a prefix length in the range of 0 to 128. You can use the ipv6-address and prefix-length arguments together to specify a subnet. If you specify a subnet, this command clears flap statistics for BGP routes learned from all dynamic peers in the subnet.
Usage guidelines
When you execute the reset bgp flap-info ipv4 command:
· If you specify only the network-address argument, the system ANDs the network address with the mask of a route. If the result matches the network address of the route, the command clears the flap statistics of the route.
· If you specify the network-address mask or network-address mask-length argument, this command clears the flap statistics of the route that matches both the specified destination network address and the mask (or mask length).
By default, the unicast keyword is used.
Examples
# Clear flap statistics for the public BGP IPv4 unicast route to network 20.1.0.0/16.
<Sysname> reset bgp flap-info ipv4 20.1.0.0 16
# Clear flap statistics for the public BGP IPv4 unicast routes learned from peer 1.1.1.1.
<Sysname> reset bgp flap-info ipv4 peer 1.1.1.1
# Clear flap statistics for the public BGP IPv6 unicast route to network 2345::/16.
<Sysname> reset bgp flap-info ipv6 2345:: 16
# Clear flap statistics for public BGP IPv6 unicast routes learned from peer 1::1.
<Sysname> reset bgp flap-info ipv6 peer 1::1
Related commands
· dampening
· display bgp routing-table flap-info
router id (system view)
Use router id to configure a global router ID.
Use undo router id to remove the global router ID.
Syntax
router id router-id
undo router id
Default
No global router ID is configured.
Views
System view
Predefined user roles
network-admin
mdc-admin
Parameters
router-id: Specifies a router ID in IP address format.
Usage guidelines
Some routing protocols use a router ID to identify a device. You can configure a global router ID, which is used by routing protocols that have no router ID configured.
If no global router ID is configured, the highest loopback address, if any, is used as the router ID. If no loopback address is available, the highest physical interface IP address is used, regardless of the interface status. If no IP address is configured for any interface, the router ID is 0.0.0.0.
During an active/standby switchover, the standby main processing unit (MPU) checks the validity of the previous router ID backed up before switchover. If it is not valid, it selects a new router ID.
If the interface IP address that is selected as the router ID is removed or modified, a new router ID is selected. The following events will not trigger a router ID re-selection:
· The interface goes down.
· After a physical interface address is selected as the router ID, an IP address is configured for a loopback interface.
· A higher interface IP address is configured.
After a router ID is changed, use the reset command to make it effective.
Examples
# Configure a global router ID as 1.1.1.1.
<Sysname> system-view
[Sysname] router id 1.1.1.1
Related commands
router-id
router-id (BGP view)
Use router-id to configure a router ID for BGP.
Use undo router-id to remove the router ID for BGP.
Syntax
router-id router-id
undo router-id
Default
BGP uses the global router ID configured by router id in system view.
Views
BGP view
Predefined user roles
network-admin
mdc-admin
Parameters
router-id: Specifies a router ID for BGP, in IP address format.
Usage guidelines
To run BGP, a router must have a router ID, which is an unsigned 32-bit integer that uniquely identifies the router in the AS.
To modify a non-zero router ID for BGP, execute the router-id command in BGP view.
To improve availability, specify the IP address of a loopback interface as the router ID for BGP.
If you execute this command in the same BGP view multiple times, the most recent configuration takes effect.
Examples
# Configure the router ID for BGP as 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] router-id 1.1.1.1
Related commands
· router id (system view)
· router-id (BGP-VPN instance view)
router-id (BGP-VPN instance view)
Use router-id to configure a router ID for a BGP VPN instance.
Use undo router-id to remove the router ID for a BGP VPN instance.
Syntax
router-id { router-id | auto-select }
undo router-id
Default
A BGP VPN instance uses the router ID configured in BGP view. If no router ID is configured in BGP view, the BGP VPN instance uses the global router ID configured in system view.
Views
BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
router-id: Specifies a router ID in IP address format.
auto-select: Automatically selects a router ID for the BGP VPN instance.
Usage guidelines
To run BGP, a VPN instance must have a router ID, which is an unsigned 32-bit integer that uniquely identifies the BGP VPN router in the AS.
To improve availability, specify the IP address of a loopback interface as the router ID.
You can specify a different router ID for each VPN instance on a device.
If you execute this command in the same BGP-VPN instance view multiple times, the most recent configuration takes effect.
If the auto-select keyword is specified, the system selects a router ID for the BGP VPN instance in the following order:
1. The highest loopback address in the BGP VPN instance as the router ID.
2. The highest physical interface address in the BGP VPN instance as the router ID, regardless of the interface status.
3. 0.0.0.0 as the router ID.
If a non-zero router ID is selected for the BGP VPN instance, the router ID will not change when a more preferable router ID is available in the BGP VPN instance.
Examples
# Configure the router ID as 1.1.1.1.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] router-id 1.1.1.1
Related commands
· router-id (system view)
· router-id (BGP view)
snmp-agent trap enable bgp
Use snmp-agent trap enable bgp to enable SNMP notifications for BGP.
Use undo snmp-agent trap enable bgp to disable SNMP notifications for BGP.
Syntax
snmp-agent trap enable bgp
undo snmp-agent trap enable bgp
Default
SNMP notifications for BGP are enabled.
Views
System view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
This feature enables BGP to generate SNMP notifications. The generated SNMP notifications are sent to the SNMP module.
For more information about SNMP notifications, see Network Management and Monitoring Configuration Guide.
Examples
# Enable SNMP notifications for BGP.
<Sysname> system-view
[Sysname] snmp-agent trap enable bgp
summary automatic
Use summary automatic to configure automatic route summarization for redistributed IGP subnet routes.
Use undo summary automatic to remove the configuration.
Syntax
summary automatic
undo summary automatic
Default
Automatic route summarization is not performed for redistributed IGP subnet routes.
Views
BGP IPv4 unicast address family view, BGP-VPN IPv4 unicast address family view
Predefined user roles
network-admin
mdc-admin
Usage guidelines
After the summary automatic command is configured, BGP summarizes IGP subnets redistributed by the import-route command.
Automatic summary routes can be manually summarized, but cannot be added to the IP routing table.
Examples
# In BGP IPv4 unicast address family view, configure automatic route summarization for redistributed IGP subnet routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] summary automatic
# In BGP-VPN IPv4 unicast address family view, configure automatic route summarization for redistributed IGP subnet routes.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] summary automatic
Related commands
· aggregate
· import-route
timer
Use timer to set a BGP keepalive interval and holdtime.
Use undo timer to restore the default.
Syntax
timer keepalive keepalive hold holdtime
undo timer
Default
The BGP keepalive interval and the holdtime are 60 seconds and 180 seconds.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
mdc-admin
Parameters
keepalive keepalive: Sets a keepalive interval in the range of 0 to 21845 seconds.
hold holdtime: Sets a holdtime in seconds, whose value is 0 or in the range of 3 to 65535. The holdtime must be at least three times the keepalive interval.
Usage guidelines
After establishing a BGP session, two routers send keepalive messages at the specified keepalive interval to each other to keep the session.
If a router receives no keepalive or update message from the peer within the holdtime, it tears down the session.
Use the timer command to configure the keepalive interval and holdtime for all BGP peers. Use the peer timer command to configure the keepalive interval and holdtime for a peer or peer group. If both commands are configured, the intervals configured by the peer timer command have higher priority.
If the holdtime settings on the local and peer routers are different, the smaller one is used.
If the holdtime is configured as 0, no keepalive message will be sent to the peer, and the peer session will never time out. If the keepalive interval is configured as 0 and the negotiated holdtime is not 0, one third of the holdtime is taken as the interval for sending keepalive messages. If neither the holdtime nor the keepalive interval is configured as 0, the actual keepalive interval is the smaller one between one third of the holdtime and the keepalive interval.
The timer command affects only new BGP sessions.
After the timer command is executed, no peer session is closed at once. The configured holdtime is used for negotiation in session re-establishment (for example, when you reset the BGP session).
Examples
# In BGP view, set the keepalive interval and holdtime to 60 seconds and 180 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] timer keepalive 60 hold 180
# In BGP-VPN instance view, set the keepalive interval and holdtime to 60 seconds and 180 seconds.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] timer keepalive 60 hold 180
# In BGP view, set both the keepalive interval and holdtime to 0 seconds, indicating that the sessions will never time out.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] timer keepalive 0 hold 0
# In BGP-VPN instance view, set both the keepalive interval and holdtime to 0 seconds for BGP sessions in vpn1, indicating that the sessions will never time out.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] timer keepalive 0 hold 0
Related commands
· display bgp peer
· peer timer