To allow BGP communication between 2 BGP routers through Cisco ASA firewall, the following configuration changes need to happen:
access-list OUTSIDE_IN permit tcp any any eq bgp
access-list OUTSIDE_IN in interface outside
tcp-map BGP_OPTIONS
tcp-options range 19 19 allow
access-list BGP_TRAFFIC permit tcp any any eq bgp
access-list BGP_TRAFFIC permit tcp any eq bgp any
class-map BGP_CLASS
match access-list BGP_TRAFFIC
policy-map global_policy
class BGP_CLASS
set connection advanced-options BGP_OPTIONS
set connection random-sequence-number disable
BGP Path Attributes:
BGP Messages:
BGP Finite-State Machine Operation (FSM):
We have 9 guests and no members online