Adversiste public segment into BGP

ricardo.josephs — Mon, 07 Sep 2020 00:00:08 GMT

Hi,

Hope you guys can help me out. In my ASA we have a public segment that need to be advertised to a BGP peer. This public network will be used for NAT. I know that the network will only be advertised is there´s a valid route, assuming I do a route to a null0 for this public network, and get the network advertised will traffic to this network be dropped? or If I create the NATs required using this network will it work?

Thank you

Ricardo

Re: Adversiste public segment into BGP

Ruben Cocheno — Wed, 09 Sep 2020 00:31:31 GMT

@ricardo.josephs

if you advertise the route to null0, the ASA will inject the route and your bgp neighbor will receive that. After that you just need to slice that subnet in small junks or just 1-to-1 NAT.

It should be fine.

topic Adversiste public segment into BGP in Network Security

Adversiste public segment into BGP

Re: Adversiste public segment into BGP