efa tenant service bgp peer-group create

Creates a BGP peer group for the specified tenant.

Syntax

efa tenant service bgp peer-group create [ --name peer-group-name | --tenant tenant-name | --description string | --pg-name string | --pg-asn string | --pg-bfd string | --pg-bfd-enable string | --pg-remove-private-as stringArray | --pg-next-hop-self string | --pg-update-source-ip string | --pg-md5-password string | --pg-md5-password-prompt-enable { true | false } | --pg-ipv4-uc-nbr-prefix-list string | --pg-ipv4-uc-nbr-route-map string | --pg-ipv4-uc-nbr-send-community string | --pg-ipv6-uc-nbr-prefix-list string | --pg-ipv6-uc-nbr-route-map string | --pg-ipv6-uc-nbr-send-community string | --pg-ipv4-uc-nbr-add-path-capability string | --pg-ipv4-uc-nbr-add-path-advertise-all string | --pg-ipv4-uc-nbr-add-path-advertise-group-best string | --pg-ipv4-uc-nbr-add-path-advertise-best string | --pg-ipv6-uc-nbr-add-path-capability string | --pg-ipv6-uc-nbr-add-path-advertise-all string | --pg-ipv6-uc-nbr-add-path-advertise-group-best string | --pg-ipv6-uc-nbr-add-path-advertise-best string | --pg-ipv6-uc-nbr-activate stringArray ]

Parameters

--name peer-group-name
Specifies the name of the BGP peer group instance.
--tenant tenant-name
Specifies the name of the tenant.
--pg-asn string
Specifies the ASN of the BGP peer group with a string in the following format: device-ip:peer-group-name,remote-asn.
--pg-bfd string
Specifies the BFD properties of the BGP peer group with a string in the following format: device-ip: peer-group-name,bfd-enable(true/false),interval,bfd-min-rx,bfd-multiplier.
--pg-bfd-enable string
Turns on BGP peer group with a string in the following format: device-ip,peer-group-name:md5-password.
--pg-name string
Specifies the BGP peer group name with a string in the following format: device-ip:peer-group-name.
--pg-remove-private-as stringArray
Turns the remove-private-as setting on or off per BGP peer group, created for external connectivity, in the following format: device-ip,pg-name:true|false. For example: 10.20.246.16,pg1:true.
By default, the setting is off.
--pg-next-hop-self string
Specifies the next-hop-self for the BGP peer group with a string in the following format: device-ip:peer-group-name,next-hop-self(true/false/always).
--pg-update-source-ip string
Updates the source IP address of the BGP peer group with a string in the following format: device-ip:peer-group-name,update-source-ip.
--pg-md5-password string
Indicates the MD5 password.
Important

Important

BGP MD5 authentication for tenant dynamic peers is not supported.
--pg-md5-password-prompt-enable { true | false }
Turns on secure input for the MD5 password. The default is false.
Important

Important

BGP MD5 authentication for tenant dynamic peers is not supported.
--description string
Describes the BGP peer group.
--pg-ipv4-uc-nbr-prefix-list string
Identifies the IPv4 unicast neighbor with a string in the following format: device-ip,pgname:prefix-list-name,direction(in | out).
--pg-ipv4-uc-nbr-route-map string
Identifies the IPv4 unicast neighbor with a string in the following format: device-ip,pgname:route-map-name,direction(in | out).
--pg-ipv4-uc-nbr-send-community string
Identifies the IPv4 send-community in the following format: device-ip,pgname:send-community (all | both | extended | large | standard | large-and-standard | large-and-extended).
--pg-ipv6-uc-nbr-prefix-list string
Identifies the IPv6 unicast neighbor with a string in the following format: device-ip,pgname:prefix-list-name,direction(in | out).
--pg-ipv6-uc-nbr-route-map string
Identifies the IPv6 unicast neighbor with a string in the following format: device-ip,pgname:route-map-name,direction(in | out).
--pg-ipv6-uc-nbr-send-community string
Identifies the IPv6 send-community in the following format: device-ip,pgname:send-community (all | both | extended | large | standard | large-and-standard | large-and-extended).
--pg-ipv4-uc-nbr-add-path-capability string
Identifies the BGP peer-group add-path capability in the format device-ip,peer-group-name:add-path-capability. Valid values are (send / receive / both).
--pg-ipv4-uc-nbr-add-path-advertise-all string
Identifies the BGP peer-group add-path advertise all in the format device-ip,peer-group-name:add-path-advertise-all(true/false).
--pg-ipv4-uc-nbr-add-path-advertise-group-best string
Identifies the BGP peer-group add-path advertise group best in the format device-ip,peer-group-name:add-path-advertise-group-best(true/false).
--pg-ipv4-uc-nbr-add-path-advertise-best string
Identifies the BGP peer-group add-path advertise best in the format device-ip,peer-group-name:add-path-advertise-best. Valid values are 2-16.
--pg-ipv6-uc-nbr-add-path-capability string

Identifies the BGP peer-group add-path capability in the format device-ip,peer-group-name:add-path-capability. Valid values are (send / receive / both).

--pg-ipv6-uc-nbr-add-path-advertise-all string

Identifies the BGP peer-group add-path advertise best in the format device-ip,peer-group-name:add-path-advertise-best. Valid values are 2-16.

--pg-ipv6-uc-nbr-add-path-advertise-group-best string
Identifies the BGP peer-group add-path advertise group best in the format device-ip,peer-group-name:add-path-advertise-group-best(true/false).
--pg-ipv6-uc-nbr-add-path-advertise-best string

Identifies the BGP peer-group add-path advertise best in the format device-ip,peer-group-name:add-path-advertise-best. Valid values are 2-16.

--pg-ipv6-uc-nbr-activate stringArray
BGP peer-group Activate in the format device-ip,peer-group-name:activate(true/false).

Examples

This example creates a peer group instance.
$ efa tenant service bgp peer-group create --name ten1bgppg1 
--tenant ten1 --pg-name 10.20.246.15:pg1 --pg-asn 10.20.246.15,pg1:55001 
--pg-bfd-enable 10.20.246.15,pg1:true 
--pg-remove-private-as 10.20.246.15,pg1:true --pg-name 10.20.246.16:pg1 
--pg-asn 10.20.246.16,pg1:55001 --pg-bfd-enable 10.20.246.16,pg1:true 
--pg-remove-private-as 10.20.246.16,pg1:true
This example creates a BGP peer-group MD5 password in a secure manner. For more information, see the "Configure BGP MD5 Authentication for Tenant BGP Peer and Peer-group Securely" topic in the ExtremeCloud Orchestrator Security Guide, 3.5.0 . 
$ efa tenant service bgp peer-group create --tenant "tenant11" 
--name "v1-PeerGrp" --pg-name 10.20.246.5:v1-PeerGrp --pg-asn 10.20.246.5,v1-PeerGrp:5200 
--pg-bfd-enable 10.20.246.5,v1-PeerGrp:true --pg-name 10.20.246.5:v3-PeerGrp 
--pg-asn 10.20.246.5,v3-PeerGrp:5201 --pg-bfd-enable 10.20.246.5,v3-PeerGrp:true 
--pg-name 10.20.246.6:v1-PeerGrp --pg-asn 10.20.246.6,v1-PeerGrp:5200 
--pg-bfd-enable 10.20.246.6,v1-PeerGrp:true --pg-md5-password-prompt-enable=true

efa tenant service bgp peer-group create --name ten1bgppg1 --tenant ten1
--pg-name 10.20.246.15:pg1  
--pg-bfd-enable 10.20.246.15,pg1:true
--pg-ipv4-uc-nbr-add-path-capability 10.20.246.15,pg1:both
--pg-ipv4-uc-nbr-add-path-advertise-all 10.20.246.15,pg1:true
--pg-ipv4-uc-nbr-add-path-advertise-group-best 10.20.246.15,pg1:true 
--pg-ipv4-uc-nbr-add-path-advertise-best 10.20.246.15,pg1:10 
--pg-ipv6-uc-nbr-add-path-capability 10.20.246.15,pg1:both
--pg-ipv6-uc-nbr-add-path-advertise-all 10.20.246.15,pg1:true
--pg-ipv6-uc-nbr-add-path-advertise-group-best 10.20.246.15,pg1:true
--pg-ipv6-uc-nbr-add-path-advertise-best 10.20.246.15,pg1:10

efa tenant service bgp peer-group create --tenant "t1" --name "vs"  
--pg-name 10.20.246.30:v1 --pg-asn 10.20.246.30,v1:5200 --pg-ipv6-uc-nbr-activate 10.20.246.30,v1:true  
--pg-ipv4-uc-nbr-route-map 10.20.246.30,v1:customer_1_in,in --pg-ipv4-uc-nbr-prefix-list 10.20.246.30,v1:customer_1_in,in  
--pg-name 10.20.246.30:v2 --pg-asn 10.20.246.30,v2:5201  
--pg-name 10.20.246.30:v3 --pg-asn 10.20.246.30,v3:5203  
--pg-name 10.20.246.30:v4 --pg-asn 10.20.246.30,v4:5204  

--pg-name 10.20.246.29:v1 --pg-asn 10.20.246.29,v1:5200 --pg-ipv6-uc-nbr-activate 10.20.246.29,v1:true  
--pg-ipv4-uc-nbr-route-map 10.20.246.29,v1:customer_1_in,in --pg-ipv4-uc-nbr-prefix-list 10.20.246.29,v1:customer_1_in,in  
--pg-name 10.20.246.29:v2 --pg-asn 10.20.246.29,v2:5201  
--pg-name 10.20.246.29:v3 --pg-asn 10.20.246.29,v3:5203  
--pg-name 10.20.246.29:v4 --pg-asn 10.20.246.29,v4:5204 
					
efa tenant service bgp peer create --tenant "t1" --name "vs"  
--ipv4-uc-dyn-nbr 10.20.246.29,vs:15.16.16.0/28,v1,20 --ipv4-uc-dyn-nbr 10.20.246.29,vs:15.16.17.0/28,v3,20  
--ipv4-uc-dyn-nbr 10.20.246.29,vs:15.16.18.0/28,v4,20 --ipv6-uc-dyn-nbr 10.20.246.29,vs:14::/127,v2,10  
					
--ipv6-uc-dyn-nbr 10.20.246.29,vs:15::/127,v3,10 --ipv4-uc-dyn-nbr 10.20.246.30,vs:15.16.16.0/28,v1,20  
--ipv4-uc-dyn-nbr 10.20.246.30,vs:15.16.17.0/28,v3,20 --ipv4-uc-dyn-nbr 10.20.246.30,vs:15.16.18.0/28,v4,20  
--ipv6-uc-dyn-nbr 10.20.246.30,vs:14::/127,v2,10 --ipv6-uc-dyn-nbr 10.20.246.30,vs:15::/127,v3,10
This example shows the use of the --pg-update-source-ip flag with IPv6 addressing. 
efa tenant service bgp peer-group create --tenant "tenant1" --name "bgpPeerGroup2"  
                   --pg-name 10.20.246.15:bgppg2 --pg-asn 10.20.246.15,bgppg2:100 --pg-update-source-ip 10.20.246.15,bgppg2:10::10 

efa tenant service bgp peer-group update --tenant "tenant1" --name "bgpPeerGroup2" --operation peer-group-add 
                   --pg-name 10.20.246.15:bgppg1 --pg-asn 10.20.246.15,bgppg1:200 --pg-update-source-ip 10.20.246.15,bgppg1:10::20 

 
efa tenant service bgp peer-group show --tenant tenant1 –detail 
============================================================================== 
Name             : bgpPeerGroup2 
Tenant           : tenant1 
State            : bgp-pg-created 
Description      : 
 
Peer Group 
---------- 
        Device IP            : 10.20.246.15 
        Peer Group           : bgppg2 
        Remote ASN           : 100 
        Next Hop Self        : false 
        Update Source IP     : 10::10 
        BFD Enabled          : false 
        BFD Interval         : 
        BFD Rx               : 
        BFD Multiplier       : 
        MD5 Password         : 
        Remove Private AS    : false 
        Activate             : Activate (afi) 
                               true (ipv4) 
                               false (ipv6) 
        Prefix List In       : 
        Prefix List Out      : 
        Route Map In         : 
        Route Map Out        : 
        Send Community       : 
        Add Path Capability  : 
        Add Path Advertise   : 
        Dev State            : provisioned 
        App State            : cfg-in-sync 

 

        Device IP            : 10.20.246.15 
        Peer Group           : bgppg1 
        Remote ASN           : 200 
        Next Hop Self        : false 
        Update Source IP     : 10::20 
        BFD Enabled          : false 
        BFD Interval         : 
        BFD Rx               : 
        BFD Multiplier       : 
        MD5 Password         : 
        Remove Private AS    : false 
        Activate             : Activate (afi) 
                               true (ipv4) 
                               false (ipv6) 
        Prefix List In       : 
        Prefix List Out      : 
        Route Map In         : 
        Route Map Out        : 
        Send Community       : 
        Add Path Capability  : 
        Add Path Advertise   : 
        Dev State            : provisioned 
        App State            : cfg-in-sync 
=================================================================================
9038087-00 Rev AB