topic Re: BGP MD5 through the firewall in General Topics

BGP MD5 through the firewall

hannk013 — Sat, 05 Sep 2015 00:52:29 GMT

HI,

if i want to allow two BGP peers to communicate through the Palo ALto and the two peers use authentication, for other firewalls since randomize tcp sequence is enabled this feature will not work without more config, is it the same case with Palo Alto, is randomize tcp suqunce a default option in PAN and does it require extra config to allow BGP MD5 through it?

Re: BGP MD5 through the firewall

pulukas — Mon, 07 Sep 2015 15:09:14 GMT

I have done BGP peering through PA v-wire with authtentication in the past. No configuration was required on the PA for this to work.

Re: BGP MD5 through the firewall

pankaku — Tue, 08 Sep 2015 13:56:53 GMT

I have tested this it works fine without doing any thing on the PA firewall.

Topology

PA1 ----PA2-----PA3

PA1 and PA3 are running BGP with authentication and it works fine, routes are exchanged perferctly.