H3C Technologies H3C SecPath F1000-E User Manual
Page 487
462
To specify a fake AS number for a peer/peer group:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Specify a fake AS number for a
peer/peer group.
peer { group-name | ip-address }
fake-as as-number
Optional.
Not specified by default.
NOTE:
This command is only applicable to an EBGP peer or peer group.
4.
Configure AS number substitution.
To configure AS number substitution for a peer/peer group:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Replace the AS number of a
peer/peer group in the
AS_PATH attribute as the local
AS number.
peer { group-name | ip-address }
substitute-as
Not configured by default.
CAUTION:
Improper AS number substitution configuration may cause route loops; use this command with caution.
5.
Remove private AS numbers from updates to a peer/peer group.
To remove private AS numbers from updates to a peer/peer group:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
3.
Configure BGP to remove
private AS numbers from the
AS_PATH attribute of updates to
a peer/peer group.
peer { group-name | ip-address }
public-as-only
By default, BGP updates carry
private AS numbers.
6.
Ignore the first AS number of EBGP route updates.
Typically, BGP checks the AS_PATH attribute of a route update received from a peer. If the first AS
number is not that of the BGP peer, the BGP router discards the route update.
To ignore the first AS number of EBGP route updates:
Step Command
Remarks
1.
Enter system view.
system-view
N/A
2.
Enter BGP view.
bgp as-number
N/A
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS H3C SecBlade LB Cards H3C SecPath L1000-A Load Balancer