CCIE Security - BGP Related Topics

To allow BGP communication between 2 BGP routers through Cisco ASA firewall, the following configuration changes need to happen:

access-list OUTSIDE_IN permit tcp any any eq bgp
access-list OUTSIDE_IN in interface outside
tcp-map BGP_OPTIONS
tcp-options range 19 19 allow
access-list BGP_TRAFFIC permit tcp any any eq bgp
access-list BGP_TRAFFIC permit tcp any eq bgp any
class-map BGP_CLASS
match access-list BGP_TRAFFIC
policy-map global_policy
class BGP_CLASS
set connection advanced-options BGP_OPTIONS
set connection random-sequence-number disable

BGP Path Attributes:

  • Weight
  • Local-Pref
  • Originate (local)
  • AS Path
  • Origin
  • MED
  • Path
  • Router-id

BGP Messages:

  • Open
  • Update
  • Notification
  • Keepalive
  • Route-refresh

BGP Finite-State Machine Operation (FSM):

  • Idle
  • Connect
  • Active
  • Open-sent
  • Open-confirm
  • Established.

Moving your apps to Amazon or Miscrosoft Clouds?

We can help you analyze your existing infrastructure, identify the cost savings we can achieve by migrating to a cloud provider. We can then execute end-to-end migration plan of your infrastructure and bringing down your TCO.

Cloud Computing

Ready for IPv6 Migration?

The Internet is running out of the equivalent of phone numbers - familiar problem, non-trivial solution.

The world has to move to IPv6, with its 128-bit addresses. But that's easier said than done.

IPv6 Migration

Are you fluent in "Linux"?

Learn Linux from a leading expert and quickly master you Linux skills.

Learn how to simplify your workflow and increase your productivity using tips and techniques of the pros.

Ideal training for Corporate IT Beginners and Advanced IT Admins alike.

Corporate Linux Training

Who's Online

We have 9 guests and no members online