BGP Authentication - Subnet-Level with TCP-AO

You can use TCP Authentication Option (TCP-AO) to authenticate Transmission Control Protocol (TCP) segments exchanged during BGP sessions to a subnet-match (that is, longest-prefix-match). Supports VRF instance along with Default Routing instance.