BGP using wrong source IP
Hi,
I have setup a s2s routed based vpn with BGP on it and this s2s vpn is established.
I can ping the other side which is 192.168.1.1 and my side is 172.23.0.1. But I have this strange situation which might lead to a bug (I think):
Firmware of the FTG = v6.0.6 build0272
My FTG should use the source IP 172.23.0.1, but its using port 1 which is my public IP (83.140.160.1) to negotiate BGP towards 192.168.1.1. I've also configured update source & source on BGP to use port2 which is 172.23.0.1
I don't find any bugs on the v6.0.6 about this, but does anyone has this experience??
Also there is no nat active ;)
FW_A_001 (bgp) # show config router bgp set as 6000 set router-id 172.23.0.1 config neighbor edit "192.168.1.1" set ebgp-enforce-multihop enable set interface "port2" set remote-as 65011 set route-map-in "rm-AZURE-IN" set route-map-out "rm-AZURE-OUT" set update-source "port2" next end FW_A_001 # show system interface port2 config system interface edit "port2" set vdom "root" set ip 172.23.0.1 255.255.252.0 set allowaccess ping https ssh snmp http fgfm capwap set type physical set alias "LAN" set device-identification enable set device-identification-active-scan enable set snmp-index 6 next end flow of bgp: FW_A_001 # id=20085 trace_id=125 func=print_pkt_detail line=5494 msg="vd-root:0 received a packet(proto=6, 83.140.160.1:16105->192.168.1.1:179) from local. flag , seq 2878734237, ack 0, win 13980" id=20085 trace_id=125 func=init_ip_session_common line=5654 msg="allocate a new session-0afcfab0" id=20085 trace_id=125 func=ipsecdev_hard_start_xmit line=692 msg="enter IPsec interface-AZURE_VPN" id=20085 trace_id=125 func=esp_output4 line=897 msg="IPsec encrypt/auth" id=20085 trace_id=125 func=ipsec_output_finish line=532 msg="send to 83.140.160.1 via intf-port1" id=20085 trace_id=126 func=print_pkt_detail line=5494 msg="vd-root:0 received a packet(proto=6, 83.140.160.1:16105->192.168.1.1:179) from local. flag , seq 2878734237, ack 0, win 13980" id=20085 trace_id=126 func=resolve_ip_tuple_fast line=5569 msg="Find an existing session, id-0afcfab0, original direction" id=20085 trace_id=126 func=ipsecdev_hard_start_xmit line=692 msg="enter IPsec interface-AZURE_VPN" id=20085 trace_id=126 func=esp_output4 line=897 msg="IPsec encrypt/auth" id=20085 trace_id=126 func=ipsec_output_finish line=532 msg="send to 83.140.160.1 via intf-port1"