cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
495
Views
0
Helpful
1
Replies

BGP - NAT and MD5

lmanavalan
Level 1
Level 1

Hi

In my senario i have BGP configured between two routers. i have mutihop configured in this BGP because it going through a firewall passing through a VPN tunnel at the other end its comes of the VPN tunnel and forms the neighbors. Its all working.

But, for some reason i need to change the update-source IP address at site A. so in my configuration the local IP is nated on the firewall before entering the VPN tunnel. (i dont have permision to do any IP changes at Site B BGP configuration)

My issue is because i configured the MD5 password for BGP authentication the BGP status is Active but, when i remove the password at both end the BGP is forming Neighbhors.

Why does MD5 not working via the NATed configuration. Is it using the local IP address ( not the nated address) of the BGP configuration for MD5 authentidation which is not recogonised at the other end.

 

Thanks in advance

Logesh.

1 Reply 1

milan.kulik
Level 10
Level 10
Hi, which FW are you using? Read below discussing for ASA and Checkpoint FWs: http://ieoc.com/forums/p/3889/12428.aspx http://www.costiser.ro/2013/03/31/bgp-md5-authentication/ https://www.fir3net.com/Firewalls/Check-Point/bgp.html Best regards, Milan
Review Cisco Networking products for a $25 gift card