16.4 BGP Authentication Configuration Checklist

BGP uses MD5 to authenticate every BGP routing protocol TCP segment and establish peering.

The computed MD5 hash is based on the following –

  • IP header
  • TCP header
  • TCP Payload
  • Shared Secret (key or password)

The computed hash is stored in TCP option 19. The router authenticates the source of each BGP routing protocol packet it receives.