D-Link DGS-3600 Switch User Manual


 
xStack
®
DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
116
config bgp enforce_first_as
Purpose This command is used to enforce the neighbor’s AS as the first AS in the AS list.
Syntax
config bgp enforce_first_as [enable | disable]
Description This command is used to enforce the neighbor’s AS as the first AS in the AS list.
When the setting is enabled, any updates received from an external neighbor, that does not
have the neighbor’s configured Autonomous System (AS) at the beginning of the AS_PATH
in the received update, will be denied. Enabling this feature adds to the security of the BGP
network by not allowing traffic from unauthorized systems.
Parameters
enforce_first_as - Enable or disable the enforce_first_as setting. The default setting is
disabled.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To enable the BGP process’s enforce_first_as ability:
DGS-3627:admin# config bgp enforce_first_as enable
Command: config bgp enforce_first_as enable
Success
DGS-3627:admin#
create bgp aggregate_address
Purpose This command is used to create an aggregate entry in the Border Gateway Protocol (BGP)
database.
Syntax
create bgp aggregate_address <network_address> {summary_only | as_set}
Description Using the aggregate_address command with no keywords will create an aggregate entry in
the BGP routing table, if any more specific BGP routes are available that fall within the
specified range. The aggregate route will be advertised as coming from your Autonomous
System and will have the atomic aggregate attribute set to indicate that information might be
missing. That is, the original AS path associated with more specific routes will be lost. The
atomic aggregate attribute is set unless you specify the as_set keyword.
Using the as_set keyword will create an aggregate entry, but the path advertised for this
route will include an AS set consisting of all ASs that are contained in all paths that are being
summarized. Do not use continually withdrawn and updated as autonomous system path
reachability information for the summarized routes changes.
Using the summary_only keyword will create an aggregate route but suppresses
advertisements of more specific routes to all neighbors. If you want to suppress only
advertisements to certain neighbors, you may use the neighbor prefix_list command.
Parameters
<network_address> - The IP network address aggregated.
as_set - Generates Autonomous System set path information. The default setting is not set.
summary_only - More specific routes will not be advertised. The default setting is not set.
Restrictions Only Administrator and Operator-level users can issue this command.
Example usage:
To create an aggregate route of which the network address is 10.0.0.0/8, suppress more-specific routes: