BGP peering

[Matt qomat]

Question. Best practice is to configure iBGP via loopback interface. My question is, is that valid statement for scenario where two BGP peers are seperated by a firewall?

[rais]

For iBGP peering, the FW shouldn't matter. Loopbacks can still be used.

Some FW support bgp themselves, so they can be part of iBGP.

Thanks.

[Giuseppe Larosa]

Hello Mateuz,

iBGP allows for a TTL=255 in the BGP packets so the added hop caused by the firewall is not a problem for the iBGP session.

if the session were eBGP you would need to tune the ebgp-multihop to take care of the FW hop.

Hope to help

Giuseppe