cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
276
Views
1
Helpful
3
Replies

Secure eBGP Session with an IPsec VTI?

jjevans1
Level 1
Level 1

Hello All,

I am trying to set this up with two Cisco 8000 routers with version 17.09: 

Secure eBGP Session with an IPsec VTI

www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/118977-config-ebgp-00.html

The problem is that this looks like it is for a different series or older version of IOS. 

Does anyone have a updated guide that I can use for reference? 

Thank you,

J

3 Replies 3

You have router or ASA firewall ?

MHM

Just two routers

 

Then use 

Interface tunnel 0

Ip add 5.5.5.1 255.255.255.0 

Tunnel source LOCAL-WAN-IP

Tunnel destination REMOTE-WAN-IP

Tunnel protection ipsec profile eBGP

Same in othet router but the tunnel IP will be 5.5.5.2

Router bgp xx

Neighbor 5.5.5.2 remote yy

Neighbor 5.5.5.2 update tunnel 0

Now this for ebgp routing if you want to change the next hop of route learn via ebgp to pass directly via WAN use route-map and set next-hop' this make ipsec tunnel to learn prefix and data pass as clear text via wan interface.

By the way the doc. You share list exactly steps I mention and this doc. Is so so perfect' try it and if you stop in any step send to me.

Thanks 

MHM

Review Cisco Networking for a $25 gift card