Junos OS

Hi,

If I want to enable BGP routing on a J-Series device running Junos with advanced services, do I have to create a policy permitting BGP traffic or is it automatically enabled by default.

Regards,

Dominik

Hi Dominik,

You will have to explicitly define what protocols you allow or not, over what interfaces etc..

zones {
    security-zone trust {
        tcp-rst;
        interfaces {
            ge-0/0/0.0 {
                host-inbound-traffic {
                    system-services {
                        http;
                        https;
                        ssh;
                        telnet;
                        dhcp;
                    }
                    protocols {   <<<<<<<
                        all;  
                    }
                }
            }
          }
       }
   

HTH,

-A

Security policy is not needed for self traffic which includes dynamic routing protocols. This assumes that your J-Series router will be the BGP peer. But as Antares stated, you do have to enable host-inbound-traffic protocol bgp for whichever interface you will be peering BGP on.

-Richard

Great input guys. I will make myself more familiar with the ES features in the near future but for the moment, this was enough.

Kind regards,

Dominik