North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: MD5 for TCP/BGP Sessions

  • From: Eduardo Ascenco Reis
  • Date: Thu Mar 31 17:48:02 2005

Dear Fellows,
a simple configuration that can help to improve security on BGP tcp sessions is to establish it using ip loopback address on both sides, even in situations with only one link between routers. By doing that the ip address used are hidden from traceroute tools discovery.
Also the ip address used can be no routeable outside both routers, which will naturally block ip traffic against the BGP tcp session from any other host.
Regards,
Eduardo Ascen�o Reis.