Query regarding BFD

[ankurs2008]

Hi

Is BFD (Bidirectional Forwarding Detection) supported in any of the ASA Versions ?

[Panos Kampanakis]

I believe BFD works over IP, so opening ACLs should do the trick.

There is no inspection on the ASA for it, that is for sure, but I don't think one will be needed.

I haven't tested, so not 100% sure.

PK

[ankurs2008]

Hi

can u please let me know how it is accomplished via ACL.Can you please look at the below URL and confirm whether this feature is really supported on asa ?

http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/fs_bfd.html

[Jon Marshall · Accepted solution]

ankurs2008 wrote:
Hi
can u please let me know how it is accomplished via ACL.Can you please look at the below URL and confirm whether this feature is really supported on asa ?
http://www.cisco.com/en/US/docs/ios/12_0s/feature/guide/fs_bfd.html

Just to clarify. Do you mean can the ASA participate in BFD ie. does it support it ? In which case as far as i know no it doesn't.

If you mean can BFD be used throgh a firewall then yes you should be able to do this. You would need to allow the BFD ports -

bfd-control     Port 3784 TCP        BFD Control Protocol
bfd-control     Port 3784 UDP        BFD Control Protocol
#                                    [RFC-ietf-bfd-v4v6-1hop-10.txt]
bfd-echo        Port 3785 TCP        BFD Echo Protocol 
bfd-echo        Port 3785 UDP        BFD Echo Protocol
#                                    [RFC-ietf-bfd-v4v6-1hop-10.txt]

Jon

[ankurs2008]

thanks , thats what i wanted to know if we can confiure BFD on ASA or not , i believe we can not . Thanks for the help !

[Sumanta Ghosh]

Hi Experts

BFD is not working in ASA 9.9 running on FPR 9300. Maybe limited or no support?

Tried both single/multi hop BFD template and map.

Regards,

Sumanta Ghosh.

[airekoth]

I totally agreed with your answer my problem is solved. I am very happy.

Have a nice day to all.

[muellerjohn]

BFD (Bidirectional Forwarding Detection) is a super-fast protocol that is able to detect link failures within milliseconds or even microseconds... All (routing) protocols have some sort of mechanism to detect link failures. OSPF uses hello packets and a dead interval, EIGRP uses hello packets and a hold-down timer. etc.

For more information plz see https://community.cisco.com/t5/network-security/query-regarding-bfd/td-p/1493452-apkbik

Hope this reply is useful for you,

Thanks

[Tomajupp]

Hi, I have bit effort to answer your question.

BFD (Bidirectional Forwarding Detection) is a super fast protocol that is able to detect link failures within milliseconds or even microseconds.. All (routing) protocols have some sort of mechanism to detect link failures. For more detail see https://community.cisco.com/t5/network-security/query-regarding-bfd/td-p/1493452-apkbik

Thanks

[teatimeresults40]

Thanks to all for your kind information. I am going to bookmark this thread https://community.cisco.com/t5/network-security/query-regarding-bfd/td-p/1493452-teatime

[airekoth]

.