How do I enable the Secure BGP Template using the web GUI for a Juniper SSG5- Serial?

Posted on 2011-05-09
Medium Priority
Last Modified: 2012-05-11
I have a hosting provider that gives us access to web GUI for our Juniper SSG5- Serial device (Firmware Version: 6.2.0r7.0 Firewall+VPN).

In order to help meet PCI Compliance, we need to enable the Secure BGP Template on this device.

Any ideas on how I go about doing it?

Question by:indsupport
  • 2
LVL 24

Accepted Solution

rfc1180 earned 2000 total points
ID: 35722052
Not sure what it is that you are asking as your request is a bit vague.

>In order to help meet PCI Compliance, we need to enable the Secure BGP Template on this device.
Do you have BGP running?

A secure BGP template typically involves from a Cisco IOS perspective, you can use the same template as BGP is a open stanadard. You will need to get the Juniper user manual to run building the template or I am sure you can find one utilizing Google.

Configure the BGP process
allow graceful restarts
Don't wait for IGP to catch up (no sync)
log neighbor changes
limit an insane number of prepends (Max AS limit)
Announce network blocks/prefixes
specify neighbor to eBGP peer with
enable TTL Security check
enable soft reconfiguration inbound
Set BGP neighbor password
hardset BGP version number
block any inbound announcements that include bogon networks
Prevent the meltdown of a router by filling the routing and BGP tables from a known peer (Max Prefix 380000)

add null routes for the accounced networks
add ACLs to your device

Expert Comment

ID: 35728710
you can build a secure bgp template based on the cymru templates available here

LVL 24

Expert Comment

ID: 35730956
Cymru does not have a tool for the Juniper, hence the reason I manually added the steps.

Featured Post

Veeam and MySQL: How to Perform Backup & Recovery

MySQL and the MariaDB variant are among the most used databases in Linux environments, and many critical applications support their data on them. Watch this recorded webinar to find out how Veeam Backup & Replication allows you to get consistent backups of MySQL databases.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
#Citrix #Netscaler #MSSQL #Load Balance
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question