Secure Access BGP Configuration
BGP Peer IPs
- SSE Side: Use an IP address within the 169.254.0.0/24 range; for example, 169.254.0.5 for the primary data center and 169.254.0.9 for the secondary data center.
- Customer Side: Match these IPs within the 169.254.0.0/24 range whenever possible; for example with 169.254.0.6 (for 169.254.0.5) and 169.254.0.10 (for 169.254.0.9). We recommend this for ease of configuration. However, this is not mandatory and the customer-side IP range can be different and/or outside the 169.254.0.0/24 range.
BGP Identifier (Router ID)
- Do not use 169.254.0.1 as the BGP identifier.
- Use the local router gateway address (typically in the RFC1918 space, e.g., 192.168.x.x) as the customer-side BGP identifier. Avoid using addresses in the 169.254.0.0/24 range.
Some devices refer to the BGP identifier as the Router ID.