BGP MD5 through the firewall

[hannk013]

HI,

if i want to allow two BGP peers to communicate through the Palo ALto and the two peers use authentication, for other firewalls since randomize tcp sequence is enabled this feature will not work without more config, is it the same case with Palo Alto, is randomize tcp suqunce a default option in PAN and does it require extra config to allow BGP MD5 through it?

[pulukas · Accepted solution]

I have done BGP peering through PA v-wire with authtentication in the past.  No configuration was required on the PA for this to work.

[pankaku · Accepted solution]

I have tested this it works fine without doing any thing on the PA firewall.

Topology

PA1 ----PA2-----PA3

PA1  and PA3 are running BGP with authentication and it works fine, routes are exchanged perferctly.