NSR for BGP neighbor auto discovery

Interface-scoped TCP authentication enables TCP-MD5, TCP-Keychain, and TCP AO authentication for BGP unnumbered peers using IPv6 link-local addresses. Instead of binding authentication keys to IP addresses or prefixes, keys are bound to a logical interface, ensuring correct authentication for unnumbered links. Additionally, the dynamic neighbor configuration supports specifying an authentication algorithm with an authentication key chain or specifying an authentication key alone. The algorithm cannot be used with an authentication key.

BGP supports TCP authentication at the [edit protocols bgp group group-name neighbor address], [edit protocols bgp group group-name], and [edit protocols bgp group group-name dynamic-neighbor dyn-name] hierarchy level.