topic FTD - BGP Neighbor on LoopBack in Network Security

FTD - BGP Neighbor on LoopBack

Shervin SoAb — Sat, 05 Dec 2020 00:17:10 GMT

Dear all ,

How can I create a LoopBack on my FTD . I dont want my BGP Neighbor to be related to my physical FTD´s interface. I have two links and I´d like my BGP neighbor to be assigned on my Loopback interface.

As i know FTD does not have LoopBack.
Is there any althernative of loopback and Physical FTDs interface?

I highly appreciate your kind guidance.

Re: FTD - BGP Neighbor on LoopBack

MHM Cisco World — Fri, 04 Dec 2020 17:28:43 GMT

FTD not support Loopback interface.

Re: FTD - BGP Neighbor on LoopBack

Shervin SoAb — Fri, 04 Dec 2020 18:05:58 GMT

what is the solution in this case?

Re: FTD - BGP Neighbor on LoopBack

Shervin SoAb — Thu, 17 Dec 2020 21:19:53 GMT

Thanks in advance.

Re: FTD - BGP Neighbor on LoopBack

Marvin Rhoads — Sun, 06 Dec 2020 14:23:52 GMT

There is currently no alternative to using the FTD interface address as a BGP neighbor (assuming a non-VTI neighbor). The interface can be physical or logical (e.g., portchannel interface or a subinterface). There is no loopback interface on FTD devices (and I have not heard of any plans to introduce one).

We can form neighbor relationships with Virtual Tunnel Interfaces (VTIs), but only over a route-based site-to-site VPN

Re: FTD - BGP Neighbor on LoopBack

Shervin SoAb — Thu, 17 Dec 2020 21:30:15 GMT

In my case, I don't want my neighbors to be related to physical or logical (e.g., portchannel interface or a subinterface) because if the interface goes down and up , it takes long time to be neighbor again and get its database.

Does Cisco have any solution for this case?

Re: FTD - BGP Neighbor on LoopBack

MHM Cisco World — Thu, 17 Dec 2020 22:32:06 GMT

Config BGP with BFD this make ASA not wait peer hold time of BGP but it use BFD to detect the peer failure.

this why when one ISP down the BGP immediately failure over to other ISP.

Re: FTD - BGP Neighbor on LoopBack

MHM Cisco World — Thu, 17 Dec 2020 22:32:28 GMT

https://www.cisco.com/c/en/us/td/docs/security/asa/asa96/configuration/general/asa-96-general-config/route-bfd.html#ID-2100-00000059