HP 5500 Ei 5500 Si Switch Series Configuration Guide

 
 
352 
 
[SwitchC-bgp-af-ipv6] quit 
[SwitchC-bgp] quit 
# Configure Switch B. 
[SwitchB-bgp] ipv6-family 
[SwitchB-bgp-af-ipv6] group ebgp external 
[SwitchB-bgp-af-ipv6] peer 3::2 as-number 65009 
[SwitchB-bgp-af-ipv6] peer 3::2 group ebgp 
[SwitchB-bgp-af-ipv6] quit 
[SwitchB-bgp] quit 
4. Configure IPsec policies:  
# On Switch A, create an IPsec proposal named  tran1, and set the encapsulation mode to 
transport mode, the security protocol to ESP, the  encryption algorithm to DES, and...

 
 
353 
 
[SwitchB-ipsec-policy-manual-policy001-10] sa spi outbound esp 12345 
[SwitchB-ipsec-policy-manual-policy001-10] sa spi inbound esp 12345 
[SwitchB-ipsec-policy-manual-policy001-10] sa string-key outbound esp ab\
cdefg 
[SwitchB-ipsec-policy-manual-policy001-10] sa string-key inbound esp abc\
defg 
[SwitchB-ipsec-policy-manual-policy001-10] quit 
[SwitchB] ipsec proposal tran2 
[SwitchB-ipsec-proposal-tran2] encapsulation-mode transport 
[SwitchB-ipsec-proposal-tran2] transform esp...

 
 
354 
 
[SwitchB-bgp-af-ipv6] peer 1::1 ipsec-policy policy001 
[SwitchB-bgp-af-ipv6] quit 
[SwitchB-bgp] quit 
6. Apply IPsec policies to EBGP peers: 
# Configure Switch C. 
[SwitchC] bgp 65009 
[SwitchC-bgp] ipv6-family 
[SwitchC-bgp-af-ipv6] peer ebgp ipsec-policy policy002 
[SwitchC-bgp-af-ipv6] quit 
[SwitchC-bgp] quit 
# Configure Switch B. 
[SwitchB] bgp 65008 
[SwitchB-bgp] ipv6-family 
[SwitchB-bgp-af-ipv6] peer ebgp ipsec-policy policy002 
[SwitchB-bgp-af-ipv6] quit 
[SwitchB-bgp] quit 
7....

 
 
355 
 
 Routing policy configured: 
 No routing policy is configured 
         BGP Peer is 3::2,  remote AS 65009, 
         Type: EBGP link 
         BGP version 4, remote router ID 3.3.3.3 
         BGP current state: Established, Up for 00h01m51s 
         BGP current event: RecvKeepalive 
         BGP last state: OpenConfirm 
         Port:  Local – 1029     Remote - 179 
         Configured: Active  Hold Time: 180 sec  Keepalive Time: 60 sec \
         Received  : Active  Hold Time: 180 sec...

 
 
356 
  Figure 118 Network diagram 
 
Device Interface IP address Device Interface IP address 
Switch A  Vlan-int100  3000::1/64 Switch C Vlan-int101 3001::3/64 
 Vlan-int200 2000::1/64  Vlan-int201  2001::3/64 
Switch B  Vlan-int100  3000::2/64 Switch D Vlan-int200 2000::2/64 
 Vlan-int101 3001::2/64  Vlan-int201 2001::2/64  
Configuration procedure 
1. Configure IP addresses for inte rfaces. (Details not shown.) 
2. C o nfi gu r e  O SP F v3  to  mak e  s u re  that Sw i t c h A  and   Switch C are...

 
 
357 
 
[SwitchA] route-policy apply_med_50 permit node 10 
[SwitchA-route-policy] if-match ipv6 address acl 2000 
[SwitchA-route-policy] apply cost 50 
[SwitchA-route-policy] quit 
[SwitchA] route-policy apply_med_100 permit node 10 
[SwitchA-route-policy] if-match ipv6 address acl 2000 
[SwitchA-route-policy] apply cost 100 
[SwitchA-route-policy] quit 
{ Apply routing policy  apply_med_50 to routes outgoing to peer 3001::3, and apply routing 
policy  apply_med_100  to routes outgoing to peer...

 
 
358 
 
{ Configure the minimum interval for transmitting BFD control packets as 500 milliseconds.  
[SwitchC-Vlan-interface101] bfd min-transmit-interval 500 
{ Configure the minimum interval for receiving BFD control packets as 500 milliseconds.  
[SwitchC-Vlan-interface101] bfd min-receive-interval 500 
{ Configure the detect multiplier as 7.  
[SwitchC-Vlan-interface101] bfd detect-multiplier 7 
[SwitchC-Vlan-interface101] return 
6. Verify the configuration: 
The following operations are made on...

 
 
359 
 
 Destination  : 1200::                                  PrefixLength : 6\
4 
 NextHop      : 3000::1                                 Preference   : 2\
55 
 RelayNextHop : 3001::2                                 Tag          : 0\
H 
 Neighbor     : 3000::1                                 ProcessID    : 0\
 
 Interface    : Vlan-interface101                     Protocol     : BGP\
4+ 
 State        : Active Adv                              Cost         : 5\
0 
 Tunnel ID    : 0x0...

 
 
360 
 
 Neighbor     : 2000::1                                 ProcessID    : 0\
 
 Interface    : Vlan-interface201                       Protocol     : B\
GP4+ 
 State        : Active Adv                              Cost         : 1\
00 
 Tunnel ID    : 0x0                                     Label        : N\
ULL 
 Age          : 4635sec 
The output shows that Switch C has one route to reach network 1200::0/64, that is, Switch 
CSwitch DSwitch A.  
Troubleshooting IPv6 BGP configuration 
IPv6 BGP...

 361 
Configuring routing policies 
Hardware compatibility 
The HP 5500 SI Switch Series does not support OSPF, BGP, IS -IS, OSPFv3, IPv6 BGP, IPv6 IS -IS, or FRR. 
Introduction to routing policy 
Routing policies are used to receive, advertise, and redistribute only specific routes and modify the 
attributes of some routes. 
Routing policy in this chapter involves both IPv4 routing policy and IPv6 routing policy. 
A routing policy is used to filter routes when they are received, advertised, or...