BGP through PIX Question

From: Lab Rat #109385382 (techlist01@gmail.com)
Date: Sat Dec 09 2006 - 02:46:11 ART

If I had a requirement to only allow a router inside of a PIX initiate a BGP
connection to a router outside of the PIX, what could some of the
possibilities be?

I'm trying to determine where the controls should be, as well. I know there
are certain things a router can do to initiate a BGP session and I know that
the PIX can control who begins what, as well...

So, I'm thinking one of the following:

1. Set inside router with lower BGP router-id than the outside router
2. Use Policy NAT on the PIX (e.g. nat (inside) 1 access-list XX)

I guess from a lab perspective, I'm trying to determine the best
practice...anyone have thoughts?

Thanks,

Ed

This archive was generated by hypermail 2.1.4 : Tue Jan 02 2007 - 07:50:37 ART