Configuring BGP Confederation in Gaia Clish

You can configure a BGP confederation in conjunction with external BGP.

Configuring BGP Confederations

Syntax

set bgp

      confederation identifier <Number of Autonomous System>

      confederation identifier off

      confederation aspath-loops-permitted <1-10>

      confederation aspath-loops-permitted default

      routing-domain identifier <Number of Autonomous System>

      routing-domain identifier off

      routing-domain aspath-loops-permitted <1-10>

      routing-domain aspath-loops-permitted default

      synchronization {off | on}

Parameters

Parameter

Description

confederation identifier <Number of Autonomous System>

Specifies the identifier for the entire confederation. This identifier is used as the autonomous system number in external BGP sessions. Outside the confederation, the confederation id is the autonomous system number of a single, large autonomous system. Thus the confederation id must be a globally unique, typically assigned autonomous system number.

confederation identifier off

Disables the confederation identifier.

confederation aspath-loops permitted <1-10>

Specifies the number of times the local autonomous system can appear in an autonomous system path for routes learned through BGP. If this number is higher than the number of times the local autonomous system appears in an autonomous system path, the corresponding routes are discarded or rejected.

confederation aspath loops-permitted default

Specifies a value of 1.

routing-domain identifier <Number of Autonomous System>

Specifies the routing domain identifier (RDI) for this router. You must specify the RDI if you are using BGP confederations. The RDI does not need to be globally unique since it is used only within the domain of the confederation.

routing-domain identifier off

Disables the routing-domain identifier.

routing-domain aspath-loops-permitted <1-10>

Specifies the number of times the local autonomous system can appear in an autonomous system path for routes learned through BGP. If this number is higher than the number of times the local autonomous system appears in an autonomous system path, the corresponding routes are discarded or rejected.

routing-domain aspath-loops-permitted default

Specifies a value of 1.

synchronization {off | on}

Enables IGP synchronization. Set this option On to cause internal and confederation BGP peers to check for a matching route from IGP protocol before installing a BGP learned route.

Configuring BGP Confederation Peers

Note - The IP address of a peer can be an IPv4 or an IPv6 address.

Syntax

set bgp confederation member-as <ID of Autonomous System>

      {off | on}

      description {off | "<Your Text>"}

      interface <Name of Interface> {off | on}

      local-address <IP Address> [{off | on}]

      med {default | <Value>}

      nexthop-self [{off | on}]

      outdelay {off | <Delay>}

      peer <IP Address>

            [{off | on}]

            accept-routes {all | none}

            authtype {none | md5 secret <Password>}

            capability {ipv4-unicast | ipv6-unicast} {off | on}

            graceful-restart {off | on}

            graceful-restart-stalepath-time {default | <Time>}

            holdtime {default | <Time>}

            ignore-first-ashop {off | on}

            keepalive {default | <Time>}

            local-address <Local IP Address> [{off | on}]

            log-state-transitions {off | on}

            log-warnings {off | on}

            no-aggregator-id {off | on}

            outgoing-interface <Name of Interface> {off | on}

            passive-tcp {off | on}

            peer-type

                  [none] [{off | on}]

                  [reflector-client {off | on}]

                  [no-client-reflector {off | on}]

            ping {off | on}

            route-refresh {off | on}

            send-keepalives {off | on}

            send-route-refresh

                  request {all | ipv4 | ipv6} unicast

                  route-update {all | ipv4 | ipv6} unicast

            throttle-count {off | <Number>}

            trace {all | keepalive | open | packets | update | general | normal | policy | route | state | task | timer} {off | on}

            weight <Weight>

            comment "<Your Text>"

      protocol {all | bgp | direct | rip | static | ospf | ospfase}

Parameters

Parameter

Description

{off | on}

Creates (on) or removes (off) a peer group with AS ID.

description {off | "<Your Text>"]

Optional: Sets the peer group description to <Your Text>, or turns off the description (off).

interface <Name of Interface> {off | on}

Sets an interface (<Name of Interface>: eth1, eth2, and so on) as the peer group interface, and turns it on or off.

local-address <IP Address> [{off | on}]

Sets a peer group with an IP address on the local gateway.

med {default | <Value>}

Sets the peer group local Multi-Exit Discriminator (MED).

The default is 0.

nexthop-self {off | on}

Sets (on) or removes (off) the local gateway as the default exit gateway for the peer group.

outdelay {off | <Delay>}

Sets or removes (off) the out-delay value (in seconds).

Set this value to enforce rate limiting.

peer <IP Address> [{off | on}]

Creates a peer group with the specified gateway (<IP Address>).

protocol {all | bgp | direct | rip | static | ospf | ospfase}

Sets an internal peer group protocol.

peer <IP Address> accept-routes {all | none}

Accepts routes from peers only if there is an inbound BGP route policy.

In the absence of a configured import policy for this peer, specify "all" or "none" here.

  • all - Accepts and installs routes with an invalid preference. This is the default.

    Depending on the local BGP inbound policy, the routes can become active or inactive.

  • none - Deletes routes from a peer when no explicit local BGP inbound policy exists.

    Use this option to save memory overhead when many routes are rejected because there is no local policy.

    These routes can be re-learned only if you restart the BGP session.

peer <IP Address> authtype {none | md5 secret <Password>}

Sets peer authentication between the local gateway and the specified peer gateway (<IP Address>).

You can set it to MD5 and specify the password (<Password>), or you can turn it off (none).

peer <IP Address> capability {ipv4-unicast | ipv6-unicast} [{off | on}]

Configures peer multiprotocol capabilities (ipv4-unicast or ipv6-unicast) with the specified peer (<IP Address>).

Turn these on or off, if necessary.

peer <IP Address> graceful-restart {off | on}

Turns graceful restart on and off between the local gateway and the specified peer (<IP Address>).

peer <IP Address> graceful-restart-stalepath-time {default | <Time>}

Sets graceful restart stalepath time (in seconds) with the specified peer (<IP Address>).

peer <IP Address> holdtime {default | <Time>}

Sets the maximal amount of time (in seconds) that can elapse between messages from the specified peer (<IP Address>).

peer <IP Address> ignore-first-ashop {off | on}

Sets the router to ignore the first AS number in the AS_PATH for routes learned from the specified peer.

Use this option for a route server peer in so-called transparent mode.

The route server is configured to redistribute routes from multiple ASs and does not prepend its own AS number.

peer <IP Address> keepalive {default | <Time>}

Sets the keepalive timer (in seconds) for the specified peer (<IP Address>).

peer <IP Address> local-address <Local IP Address {off | on}

Sets a local IP address (<Local IP Address) for the specified peer (<IP Address>).

peer <IP Address> log-state-transitions {off | on}

Turns logging of peer state transitions on or off for the specified peer (<IP Address>).

peer <IP Address> log-warnings {off | on}

Turns logging of warnings on or off for the specified peer (<IP Address>).

peer <IP Address> no-aggregator-id {off | on}

Sets the specified peer (<IP Address>) to not aggregate AS routes (on).

If set to off, the peer will create aggregate routes.

peer <IP Address> outgoing-interface <Name of Interface> {off | on}

Sets a specific outgoing interface (<Name of Interface>) to the specified peer (<IP Address>).

peer <IP Address> passive-tcp {off | on}

Sets peer passive behavior. If on, the gateway does not initialize connections to the specified remote peer (<IP Address>).

The default is off.

peer <IP Address> peer-type {none | reflector-client | no-client-reflector} [{off | on}]

Sets the local gateway's peer type in the relation to the specified peer (<IP Address>).

peer <IP Address> ping {off | on}

Sets ping capability between the local gateway and the specified peer (<IP Address>).

The default is off.

peer <IP Address> route-refresh {off | on}

Sets route refresh capability between the local gateway and the specified peer (<IP Address>).

The default is off.

peer <IP Address> send-keepalives {off | on}

Sets the gateway to always send keepalive messages to the specified peer (<IP Address>).

The default is off.

peer <IP Address> send-route-refresh request {all | ipv4 | ipv6} unicast

Sets the local gateway to request BGP route updates from the specified peer (<IP Address>).

peer <IP Address> send-route-refresh route-update {all | ipv4 | ipv6} unicast

Sets the local gateway to respond to requests for BGP route updates from the specified peer (<IP Address>).

peer <IP Address> throttle-count {off | <Number>}

Sets the maximal number of BGP updates that can be sent at one time to the specified peer (<IP Address>).

The range for the <Number> is 0-65535. The default is off.

peer <IP Address> trace [{keepalive | open | packets | update | all | general | normal | policy | route | state | task | timer}] {off | on}

Sets the types of packets to trace from the specified peer (<IP Address>).

peer <IP Address> weight <Weight>

Sets the weight for the specified peer (<IP Address>).

The value range for the <Weight> is 0-65535.

peer <IP Address> comment "<Your Text>"

Sets a comment associated with the specified peer (<IP Address>).