BGP Active/Passive Open - Deterministic

[kfarrington]

Hello All,

Is there a way that you can configure a peer only to be the active side of the TCP session to reject passive opens?

I understand that in a connection collision, the higher router ID drops the passive connection, but how likley are connection collisions?

Is this possible thru the IOS command line? Or is it just use ACLs?

Thx

Ken

[Harold Ritter]

Ken,

You can configure the local peer to be passive by using the following command:

neighbor x.x.x.x transport connection-mode passive

Hope this helps,

[kfarrington]

Brill - Thx fella :) Rated!