H3C Technologies H3C SR8800 - Manual (Page 375)

359
Configuration procedure
To apply an IPsec policy to a peer/peer group
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter BGP view. bgp as-number N/A
3. Enter IPv6 address
family view.
ipv6-family N/A
4. Apply an IPsec policy to
a peer/peer group.
peer { group-name | ip-address } ipsec-policy
policy-name
Not configured by default
Configuring a large scale IPv6 BGP network
In a large-scale IPv6 BGP network, configuration and maintenance become no convenient due to too
many peers. Configuring peer groups makes management easier and improves route distribution
efficiency. Peer group includes IBGP peer group, where peers belong to the same AS, and EBGP peer
group, where peers belong to different ASs. If peers in an EBGP group belong to the same external AS,
the EBGP peer group is a pure EBGP peer group, and if not, a mixed EBGP peer group.
In a peer group, all members have a common policy. Using the community attribute can make a set of
IPv6 BGP routers in multiple ASs have the same policy, because community sending between IPv6 BGP
peers is not limited by AS.
To ensure connectivity between IBGP peers, make them fully meshed, but it becomes unpractical when
too many IBGP peers exist. Using route reflectors or confederation can solve it. In a large-scale AS, both
of them can be used.
Confederation configuration of IPv6 BGP is identical to that of BGP4, so it is not mentioned here.
Configuration prerequisites
Before you configure a large-scale IPv6 BGP network, complete the following tasks:
• Make peer nodes accessible to each other at the network layer.
• Enable BGP and configure a router ID.
Configuring IPv6 BGP peer group
Configuring an IBGP peer group
To configure an IBGP group:
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter BGP view. bgp as-number N/A
3. Enter IPv6 address family
view.
ipv6-family N/A
4. Create an IBGP peer group. group ipv6-group-name [ internal ] N/A