problem with bgp over pix

[rbinc]

I am having a difficult time grasping what I need to do to configure my pix to handle bgp.

Here is my situation:

I have a multihomed router with two isps.

isp1 interface: 192.168.168.1

isp2 interface 172.12.1.1

The outside interface ip is 192.168.168.2

The inside interface ip is 10.1.1.2

I have read this article http://www.cisco.com/warp/public/459/BGP-PIX.htm

but I am not sure if this pertains to me.

What command should I use to allow bgp through my pix? This is what I think it should be:

access-list acl-1 permit tcp host 192.168.168.2 host 10.1.1.2 eq bgp

Thanks for any information.

-J

[scoclayton]

Hi,

I am a little unclear on the design you have but what you posted above, looks good. One additional item that you will need is an xlate. In most cases such as this, this is accoplished with an identity static. Something like this:

static (inside,outside) 10.1.1.2 10.1.1.2 netmask 255.255.255.255

There are a few other ways to achieve this so if this is not clear or will not work, let me know. Good luck.

Scott