Is ASA 5550 firewall supports BGP

[say28_105]

Hi All,

Please help me out regarding my question.

Thank you all in advance.

Regards,

Sayak

[Ramraj Sivagnanam Sivajanam]

Hi Bro

Cisco ASA itself doesn’t support BGP routing protocol, but it can pass through BGP packets. The dynamic routing protocols supported by Cisco ASA v8.4 are EIGRP, OSPF and RIP.

For further details on this, please refer to these URLs

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/route_overview.html#wp1091638

https://supportforums.cisco.com/thread/2125090

P/S: If you think this comment is useful, please do rate them nicely :-)

[Nilo Noguera]

Hello Sayak,

The ASA does not support BGP. Border Gateway Protocol. BGP performs interdomain routing in TCP/IP networks. BGP is an Exterior Gateway Protocol, which means that it performs routing between multiple autonomous systems or domains and exchanges routing and access information with other BGP systems.

http://www.cisco.com/en/US/docs/security/asa/asa84/configuration/guide/glossary.htmlhttp://www.cisco.com/en/US/docs/security/asa/asa90/configuration/guide/glossary.html

ASA allows passing of BGP sessions through it but just only that. It’s being discussed that it will be supported in the future but there’s no definite date yet.

         "niLz"

Nilo Noguera Jr. 
| Specialist, Virtual Engineering - Partner Helpline Organization 
together we are the human network

[Feras Ali]

Hi Sayak,

BGP is supported now on ASA 9.2.1, please see the release notes:

http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/release/notes/asarn92.html#pgfId-586890

From the link we see:

We now support the Border Gateway Protocol (BGP). 

Also, please see the 9.2.1 configuration guide (BGP-section):

http://www.cisco.com/c/en/us/td/docs/security/asa/asa92/configuration/general/asa-general-cli/route-bgp.html

Thanks,

Feras

[Marius Gunnerud]

Just keep in mind, that just because the ASA supports BGP now, doesn't mean it is a good idea to use BGP on the ASA.  From my point of view, keep the firewall and its functions seperate from the routing functions.

--

Please remember to select a correct answer and rate helpful posts