370
[Sysname-bgp] address-family ipv4 unicast
[Sysname-bgp-ipv4] peer test next-hop-local
# In BGP-VPN IPv4 unicast address family view, specify the router as the next hop for routes sent to peer
group test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] ip vpn-instance vpn1
[Sysname-bgp-vpn1] address-family ipv4 unicast
[Sysname-bgp-ipv4-vpn1] peer test next-hop-local
# In BGP IPv6 unicast address family view, specify the router as the next hop for routes sent to peer group
test.
<Sysname> system-view
[Sysname] bgp 100
[Sysname-bgp] address-family ipv6 unicast
[Sysname-bgp-ipv6] peer test next-hop-local
peer password
Use peer password to enable MD5 authentication for a BGP peer or peer group.
Use undo peer password to remove MD5 authentication for the BGP peer or peer group.
Syntax
peer { group-name | ip-address | ipv6-address } password { cipher | simple } password
undo peer { group-name | ip-address | ipv6-address } password
Default
MD5 authentication is disabled.
Views
BGP view, BGP-VPN instance view
Predefined user roles
network-admin
Parameters
group-name: Specifies a peer group by its name, a case-sensitive string of 1 to 47 characters. The peer
group must have been created.
ip-address: Specifies a peer by its IP address. The peer must have been created.
ipv6-address: Specifies a peer by its IPv6 address. The peer must have been created.
cipher: Sets a ciphertext password.
simple: Sets a plaintext password.
password: Specifies a password, a case-sensitive string of 33 to 137 characters in cipher text, or 1 to 80
characters in plain text.
Usage guidelines
You can enable MD5 authentication to enhance security using the following methods: