[j-nsp] How does multihop eBGP work?

[Patrick Okui]

On 24/06/2011 8:43 PM, Alex wrote:
> If you ever need multihop eBGP again, and are still worrying about
> security/hijacking/packet modification/code injection there is a JUNOS
> feature called "BGP IPSec protection" which establishes transport IPSec
> SA between 2 Juniper boxes for explicit purpose of encrypting BGP packets.

Again, that fixes how believable the BGP updates are. Once you forward
your packets they're on their own.

--
patrick

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 259 bytes
Desc: OpenPGP digital signature
URL: <https://puck.nether.net/pipermail/juniper-nsp/attachments/20110624/c4add310/attachment.pgp>