Re: Securing BGP sessions (Issue#41)

On Fri, Dec 13, 2019 at 03:09:32PM -0800, Mahesh Jethanandani wrote:
> > On Dec 13, 2019, at 10:47 AM, Acee Lindem (acee) <[email protected]> wrote:
> > It is only IPsec transport mode that isn't described. Also, I don't know of anyone who supports this so I'm wondering why it is in the discussion for this version of the BGP YANG model.
> 
> I will let Jeff comment on this.

In Junos,

Transport mode for ipsec for BGP:

https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/ipsec-sa-edit-protocols-bgp.html
https://www.juniper.net/documentation/en_US/junos/topics/topic-map/ip_security.html

While it's a valid observation that ISPs don't typically deploy IPsec at
ASBRs, this type of security is often used for BGP IPsec VPNs.

-- Jeff

_______________________________________________
Idr mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/idr