[Juniper] BGP md5 authentication configuration

Home

Routing

Juniper BGP configuration

[Juniper] BGP md5 authentication configuration

Google Translation

Main Menu

Login Form

Sections

Latest Articles

Well, in these days, not many people want to setup BGP MD5 for security concerns. Back in 2005, after some guy reported a threat on BGP sessions with ISP. There were rush to setup MD5.

Actually, the MD5 authentication is not on the BGP session. The authentication is on the TCP session. It provides a method by which each of the TCP peers is able to verify with a higher degree of certainty that packets apparently received from the TCP peer actually originated from the TCP peer. This keeps packets which are spoofed into the session from being used as valid packets in the session, so providing another layer of security to the eBGP session.

Below configuration is sample of MD 5 on Juniper router

admin@router>configure
admin@router>edit protocols bpg group neighbor
admin@router>set authentication-key peer-as
admin@router>commit

Add as favourites (21) | Views: 494 | E-mail

Be first to comment this article

Write Comment
Please keep the topic of messages relevant to the subject of the article. Personal verbal attacks will be deleted. Please don't use comments to plug your web site. Such material will be removed. Just ensure to Refresh your browser for a new security code to be displayed prior to clicking on the 'Send' button. Keep in mind that the above process only applies if you simply entered the wrong security code.
Name:
E-mail
Title:
BBCode:
Comment:
Code:*