fir3net
PPS-Firenetbanner-780.5x190-30-03-17

PIX - BGP Advanced Protocol Inspection

Summary

When passing BGP traffic through a PIX you will need to configure the PIX to disable random sequence numbers to prevent MD5 Digest mismatches on either router.

Please Note : Below presumes you all ready have a policy map defined with the name of global_policy and this has already been assigned to your device using the service-policy command.

Commands

access-list BGP-MD5-ACL permit tcp host [BGP ROUTER IP] host [BGP ROUTER IP] eq bgp

tcp-map BGP-MD5
  tcp-options range 19 19 allow

class-map BGP-MD5-CLASSMAP
 match access-list BGP-MD5-ACL

policy-map global_policy
class BGP-MD5-CLASSMAP
  set connection random-sequence-number disable
  set connection advanced-options BGP-MD5

About the Author

RDonato

R Donato

Rick Donato is the Founder and Chief Editor of Fir3net.com. He currently works as a Principal Network Security Engineer and has a keen interest in automation and the cloud.

You can find Rick on Twitter @f3lix001