IPsec

• IPsec use enables a BGP neighbor to verify

  • BGP message integrity
  • peer entity authentication (two way)
  • replayed BGP messages

• BGP-4 has means for carrying authentication information, but no key management scheme or sequence numbering facility

• IPSec supports automated key management, anti-replay service, etc.

• Vendors are already putting IPSec into routers

Previous slide

Next slide

Back to first slide

View graphic version