Forum Discussion

Altostratus

Jun 20, 2022

Solved

Bgp inside ipsec tunnel

Hi folks I was wondering if this setup is supported, Does anyone have experience with running bgp inside ipsec tunnel (peer on tunnel interface ? Self ip ? ) Thanks .

cloud

Nikoolayy1
Jun 20, 2022
I have not done it but it shouldn't be an issue as F5 Zebos module is like a mini Cisco and tunnel config has examples for using static routes but just BGP is needed:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-1-0/1.html

Also use non-floating self ip as BGP does not support floating one and the tunnels can use non-floating or floating self ip.

https://support.f5.com/csp/article/K62454350

Also don't forget the ebgp multihop option and also you may see the articles for CISCO eBGP inside ipsec.

https://support.f5.com/csp/article/K54334475

Nikoolayy1

MVP

Jun 20, 2022

I have not done it but it shouldn't be an issue as F5 Zebos module is like a mini Cisco and tunnel config has examples for using static routes but just BGP is needed:

https://techdocs.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/bigip-tmos-tunnels-ipsec-13-1-0/1.html

Also use non-floating self ip as BGP does not support floating one and the tunnels can use non-floating or floating self ip.

https://support.f5.com/csp/article/K62454350

Also don't forget the ebgp multihop option and also you may see the articles for CISCO eBGP inside ipsec.

https://support.f5.com/csp/article/K54334475