BGP Overview

BGP functions between autonomous systems (exterior BGP or eBGP) or within an AS (interior BGP or iBGP) to exchange routing and reachability information with BGP speakers. The firewall provides a complete BGP implementation, which includes the following features:
  • Specification of one BGP routing instance per virtual router.
  • BGP settings per virtual router, which include basic parameters such as local route ID and local AS, and advanced options such as path selection, route reflector, BGP Confederations, route flap dampening, and graceful restart.
  • Peer group and neighbor settings, which include neighbor address and remote AS, and advanced options such as neighbor attributes and connections.
  • Route policies to control route import, export and advertisement; prefix-based filtering; and address aggregation.
  • IGP-BGP interaction to inject routes to BGP using redistribution profiles.
  • Authentication profiles, which specify the MD5 authentication key for BGP connections. Authentication helps prevent route leaking and successful DoS attacks.
  • Multiprotocol BGP (MP-BGP) to allow BGP peers to carry IPv6 unicast routes and IPv4 multicast routes in Update packets, and to allow the firewall and a BGP peer to communicate with each other using IPv6 addresses.

Related Documentation