Skip to main content

network bgp peer-group modify

Contributors
Suggest changes

Modify a BGP peer group

Availability: This command is available to cluster administrators at the admin privilege level.

Description

The network bgp peer-group modify command is used to modify a border gateway protocol (BGP) peer group configuration.

Parameters

-ipspace <IPspace> - IPspace Name

This parameter specifies the IPspace of the peer group being modified.

-peer-group <text> - Peer Group Name

This parameter specifies the name of the peer group being modified.

[-peer-address <IP Address>] - Peer Router Address

This parameter specifies an updated value for the IP address of the peer router.

[-use-peer-as-next-hop {true|false}] - Use Peer Address As Next Hop

This parameter specifies whether the peer group uses the peer address as a next hop route. When the value is true, the peer address is used as the next hop router for packets sent from VIP LIFs via the port on which bgp-lif is configured. Internally, a default route with a gateway configured as the peer-address is added automatically on the node for all the Vservers in this peer group's IPspace. The route will be added for a Vserver only if it has a VIP LIF hosted on the current node of bgp-lif . Note that these automatically installed default routes are for VIP traffic; however, they can be used for non-VIP traffic as well if a Vserver hosts both VIP and non-VIP LIFs in the same subnet as bgp-lif . This route will have metric of 20 and will be used to forward traffic through the current port of bgp-lif . The default value of this parameter is false.

[-md5-enabled {true|false}] - TCP MD5 Enabled (privilege: advanced)

This parameter specifies whether the peer group configuration uses TCP MD5 authentication to communicate with its peer router. When the value is true, an md5-secret must be specified for the peer group being created. The default value is false.

[-md5-secret <text>] - TCP MD5 Secret Key (privilege: advanced)

This parameter specifies TCP MD5 secret key. The value for md5-secret may be specified as either a string of printable ASCII characters or as a hexadecimal string. If a string of ASCII characters is specified, the string should be enclosed in quotes and be from 1-79 characters in length. If a hexadecimal string is specified, the string of hexadecimal bytes should be prefaced with 0x (e.g., 0x893785c6) and contain from 2-160 hexadecimal characters. The md5-secret should match the MD5 secret configured on the peer router.

Examples

cluster1::> network bgp peer-group modify -ipspace Default -peer-group peer1 -peer-address 10.10.10.10