cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
892
Views
5
Helpful
4
Replies

May I have your attention Please? Inquiry about BGP session initiation..

jinhong.im
Level 1
Level 1

My question are:

When two routers initiate BGP session, is there any rule who will actively try first to estabilish the BGP session and the other end wait to receive the initation?

If there isn't such a rule, can it be adjusted for one end to try first?

Thank you,

Jinhong

4 Replies 4

naveen_b81
Level 1
Level 1

i dont know any means of blocking that in BGP, but you can block it using access-lists on your interface. BGP uses TCP port 179 which if you block it one way using a firewall to allow only one of them to initiate the connection always.

Thank you naveen,

Fistly, I didn't mean if any security feature can do that. But I just wanted to know its nature of initiation who will try first and if is there any option to satisfying this, command, to control one end initiate the session first and the other waits and reply to the initiation of the end initiating the session.

Thank you again naveen,

Any reply will be welcomed.

Harold Ritter
Cisco Employee
Cisco Employee

You can use the following command to control which peer establishes the BGP session:

RouterA(config-router)#neighbor 2.2.2.2 transport connection-mode ?

active Actively establish the TCP session

passive Passively establish the TCP session

Both peers are in active mode by default.

Hope this helps,

Harold Ritter
Sr Technical Leader
CCIE 4168 (R&S, SP)
harold@cisco.com
México móvil: +52 1 55 8312 4915
Cisco México
Paseo de la Reforma 222
Piso 19
Cuauhtémoc, Juárez
Ciudad de México, 06600
México

Thank you Hritter,

On Cisco 2600, IOS 12.3, I tried as your instruction and follows are the result.

As you can see there aren't such commands.

Your following comment will be highly appreciated

Regards,

Jinhong

Router(config-router)#neighbor 1.1.1.1 transport connection-mode passive

^

% Invalid input detected at '^' marker.

Router(config-router)#neighbor 1.1.1.1 transport connection-mode active

^

% Invalid input detected at '^' marker.

Router(config-router)#

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: