problem with bgp over pix

rbinc — Fri, 21 Feb 2020 07:14:23 GMT

I am having a difficult time grasping what I need to do to configure my pix to handle bgp.

Here is my situation:

I have a multihomed router with two isps.

isp1 interface: 192.168.168.1

isp2 interface 172.12.1.1

The outside interface ip is 192.168.168.2

The inside interface ip is 10.1.1.2

I have read this article http://www.cisco.com/warp/public/459/BGP-PIX.htm

but I am not sure if this pertains to me.

What command should I use to allow bgp through my pix? This is what I think it should be:

access-list acl-1 permit tcp host 192.168.168.2 host 10.1.1.2 eq bgp

Thanks for any information.

-J

Re: problem with bgp over pix

scoclayton — Wed, 11 Feb 2004 15:17:58 GMT

Hi,

I am a little unclear on the design you have but what you posted above, looks good. One additional item that you will need is an xlate. In most cases such as this, this is accoplished with an identity static. Something like this:

static (inside,outside) 10.1.1.2 10.1.1.2 netmask 255.255.255.255

There are a few other ways to achieve this so if this is not clear or will not work, let me know. Good luck.

Scott

topic Re: problem with bgp over pix in Network Security

problem with bgp over pix

Re: problem with bgp over pix