Résolu : Re: Relation BGPne marche pas - Page 3

Baptiste · ‎11-05-2023

Bonjour,

Je souhaite faire une infra BGP avec RPKI voici l'infra.

Le routeur C1_B arrive a pinger le 213.111.0.2 mais pas la 192.168.2.1.

Voici la conf bgp du routeur c1_B

!
router bgp 40001
bgp log-neighbor-changes
bgp rpki server tcp 192.168.102.39 port 3323 refresh 600
neighbor 192.168.1.1 remote-as 40001
neighbor 192.168.102.39 remote-as 40001
neighbor 213.111.0.2 remote-as 40002
neighbor 213.111.0.2 update-source GigabitEthernet0/3
!
address-family ipv4
network 192.168.1.0
network 213.111.0.0
neighbor 192.168.1.1 activate
neighbor 192.168.1.1 route-map rtmp-rpki in
neighbor 192.168.102.39 activate
neighbor 192.168.102.39 route-map rtmp-rpki in
neighbor 213.111.0.2 activate
exit-address-family
!

Conf routeur BGP C2_B :

router bgp 40002
bgp log-neighbor-changes
network 192.168.2.0
network 213.111.0.0 mask 255.255.192.0
neighbor 192.168.2.2 remote-as 40002
neighbor 213.111.0.1 remote-as 40001
neighbor 213.111.0.1 update-source GigabitEthernet0/0

Merci d'avance

Baptiste

Baptiste · ‎11-05-2023

M02@rt37
C2_B(config-router)#router-id 192.168.2.255
^
% Invalid input detected at '^' marker.

Mais je pense que c'est pas le même type de routeur

M02@rt37 · ‎12-05-2023

@Baptiste

bgp router-id A.B.C.D ?

Tu as forcément cette commande de disponible.

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37
Je vien de mettre le router-id et cela ne change rien.

router c1_B:

router bgp 40001
 bgp router-id 1.1.1.1
 bgp log-neighbor-changes
 bgp rpki server tcp 192.168.102.39 port 3323 refresh 600
 neighbor 192.168.1.1 remote-as 40001
 neighbor 192.168.102.39 remote-as 40001
 neighbor 213.111.0.2 remote-as 40002
 neighbor 213.111.0.2 update-source GigabitEthernet0/3
 !
 address-family ipv4
  network 192.168.1.0
  network 213.111.0.0
  neighbor 192.168.1.1 activate
  neighbor 192.168.102.39 activate
  neighbor 192.168.102.39 route-map rtmp-rpki in
  neighbor 213.111.0.2 activate
 exit-address-family

Router C2_B :

router bgp 40002
 bgp router-id 2.2.2.2
 bgp log-neighbor-changes
 network 192.168.2.0
 network 213.111.0.0
 neighbor 192.168.2.2 remote-as 40002
 neighbor 213.111.0.1 remote-as 40001
 neighbor 213.111.0.1 update-source GigabitEthernet0/1

M02@rt37 · ‎12-05-2023

Ok @Baptiste

merci pour l'output.

Peux-tu mettre les bons update-source ?

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37
Je refais la config et je te dis si je rencontre un problème

Baptiste · ‎12-05-2023

Je vais enlever tout ce qui concerne rpki et refaire la conf BGP.

Baptiste · ‎12-05-2023

M02@rt37
OK j'ai refais la config sans le rpki et je retrouve le même problème.

conf routeur C1_B :

router bgp 40001
 bgp router-id 3.3.3.3
 bgp log-neighbor-changes
 network 192.168.1.0
 network 213.111.0.0
 neighbor 192.168.1.1 remote-as 40001
 neighbor 213.111.0.2 remote-as 40002
 neighbor 213.111.0.2 update-source GigabitEthernet0/0

conf routeur C2_B :

router bgp 40002
 bgp router-id 4.4.4.4
 bgp log-neighbor-changes
 network 192.168.2.0
 network 213.111.0.0
 neighbor 192.168.2.2 remote-as 40002
 neighbor 213.111.0.1 remote-as 40001
 neighbor 213.111.0.1 update-source GigabitEthernet0/1

Et toujour le même message d'erreur sur le routeur C2_B

M02@rt37 · ‎12-05-2023

@Baptiste

c'est quoi comme routeur le C2_B ?

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37
Le router C2_B est un cisco 1921 version 15.4

M02@rt37 · ‎12-05-2023

Ok @Baptiste et le C1_B ? ASR ?

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37

c'est un cisco ASR901 version 15.6 compatible rpki

On et d'accord il manque rien dans la configuration ?

M02@rt37 · ‎12-05-2023

@Baptiste

Essayes celà:

conf routeur C1_B :

router bgp 40001
bgp log-neighbor-changes
neighbor 213.111.0.2 remote-as 40002
neighbor 213.111.0.2 update-source GigabitEthernet0/0
!
address-family ipv4
network 192.168.1.0
neighbor 213.111.0.2 activate
exit-address-family
!

conf routeur C2_B :

router bgp 40002
bgp router-id 4.4.4.4
bgp log-neighbor-changes
network 192.168.2.0
neighbor 213.111.0.1 remote-as 40001
neighbor 213.111.0.1 update-source GigabitEthernet0/1

On fera les peer iBGP une fois l'eBGP de UP !

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37
Cela met toujours le même message d'erreur

M02@rt37 · ‎12-05-2023

@Baptiste

Output: sh ip bgp neighbor depuis les 2 routeurs s'il te plait

Best regards
******* If This Helps, Please Rate *******
Ben

Baptiste · ‎12-05-2023

M02@rt37
C1_B :

BGP neighbor is 192.168.1.1, remote AS 40001, internal link

BGP version 4, remote router ID 100.0.4.1

BGP state = Established, up for 00:04:03

Last read 00:00:16, last write 00:00:21, hold time is 180, keepalive interval is 60 seconds

Neighbor sessions:

1 active, is not multisession capable (disabled)

Neighbor capabilities:

Route refresh: advertised and received(new)

Four-octets ASN Capability: advertised and received

Address family IPv4 Unicast: advertised and received

Enhanced Refresh Capability: advertised and received

Multisession Capability:

Stateful switchover support enabled: NO for session 1

Message statistics:

InQ depth is 0

OutQ depth is 0

Sent Rcvd

Opens: 1 1

Notifications: 0 0

Updates: 2 2

Keepalives: 6 6

Route Refresh: 0 0

Total: 9 11

Do log neighbor state changes (via global configuration)

Default minimum time between advertisement runs is 0 seconds

For address family: IPv4 Unicast

Session: 192.168.1.1

BGP table version 3, neighbor version 3/0

Output queue size : 0

Index 1, Advertise bit 0

1 update-group member

Slow-peer detection is disabled

Slow-peer split-update-group dynamic is disabled

Sent Rcvd

Prefix activity: ---- ----

Prefixes Current: 2 1 (Consumes 80 bytes)

Prefixes Total: 2 1

Implicit Withdraw: 0 0

Explicit Withdraw: 0 0

Used as bestpath: n/a 0

Used as multipath: n/a 0

Outbound Inbound

Local Policy Denied Prefixes: -------- -------

Total: 0 0

Number of NLRIs in the update sent: max 2, min 0

Last detected as dynamic slow peer: never

Dynamic slow peer recovered: never

Refresh Epoch: 2

Last Sent Refresh Start-of-rib: never

Last Sent Refresh End-of-rib: never

Last Received Refresh Start-of-rib: 00:04:03

Last Received Refresh End-of-rib: 00:04:03

Refresh-In took 0 seconds

Sent Rcvd

Refresh activity: ---- ----

Refresh Start-of-RIB 0 1

Refresh End-of-RIB 0 1

Address tracking is enabled, the RIB does have a route to 192.168.1.1

Route to peer address reachability Up: 1; Down: 0

Last notification 00:04:13

Connections established 1; dropped 0

Last reset never

Interface associated: (none) (peering address in same link)

Transport(tcp) path-mtu-discovery is enabled

Graceful-Restart is disabled

SSO is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 192.168.1.2, Local port: 179

Foreign host: 192.168.1.1, Foreign port: 64469

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0 mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x468C94):

Timer Starts Wakeups Next

Retrans 7 0 0x0

TimeWait 0 0 0x0

AckHold 8 5 0x0

SendWnd 0 0 0x0

KeepAlive 0 0 0x0

GiveUp 0 0 0x0

PmtuAger 0 0 0x0

DeadWait 0 0 0x0

Linger 0 0 0x0

ProcessQ 0 0 0x0

iss: 4062226446 snduna: 4062226700 sndnxt: 4062226700

irs: 1969102436 rcvnxt: 1969102732

sndwnd: 16131 scale: 0 maxrcvwnd: 16384

rcvwnd: 16089 scale: 0 delrcvwnd: 295

SRTT: 607 ms, RTTO: 2949 ms, RTV: 2342 ms, KRTT: 0 ms

minRTT: 0 ms, maxRTT: 1000 ms, ACK hold: 200 ms

uptime: 243936 ms, Sent idletime: 16384 ms, Receive idletime: 16584 ms

Status Flags: passive open, gen tcbs

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 18 (out of order: 0), with data: 10, total data bytes: 295

Sent: 17 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 8, total data bytes: 253

Packets received in fast path: 0, fast processed: 0, slow path: 0

fast lock acquisition failures: 0, slow path: 0

TCP Semaphore 0x106B5C24 FREE

BGP neighbor is 213.111.0.2, remote AS 40002, external link

BGP version 4, remote router ID 0.0.0.0

BGP state = Idle

Neighbor sessions:

0 active, is not multisession capable (disabled)

Stateful switchover support enabled: NO

Do log neighbor state changes (via global configuration)

Default minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

BGP table version 3, neighbor version 1/3

Output queue size : 0

Index 0, Advertise bit 0

Slow-peer detection is disabled

Slow-peer split-update-group dynamic is disabled

Sent Rcvd

Prefix activity: ---- ----

Prefixes Current: 0 0

Prefixes Total: 0 0

Implicit Withdraw: 0 0

Explicit Withdraw: 0 0

Used as bestpath: n/a 0

Used as multipath: n/a 0

Outbound Inbound

Local Policy Denied Prefixes: -------- -------

Total: 0 0

Number of NLRIs in the update sent: max 0, min 0

Last detected as dynamic slow peer: never

Dynamic slow peer recovered: never

Refresh Epoch: 1

Last Sent Refresh Start-of-rib: never

Last Sent Refresh End-of-rib: never

Last Received Refresh Start-of-rib: never

Last Received Refresh End-of-rib: never

Sent Rcvd

Refresh activity: ---- ----

Refresh Start-of-RIB 0 0

Refresh End-of-RIB 0 0

Address tracking is enabled, the RIB does have a route to 213.111.0.2

Route to peer address reachability Up: 1; Down: 0

Last notification 00:17:36

Connections established 0; dropped 0

Last reset never

External BGP neighbor configured for connected checks (single-hop no-disable-connected-check)

Interface associated: (none) (peering address NOT in same link)

Transport(tcp) path-mtu-discovery is enabled

Graceful-Restart is disabled

SSO is disabled

No active TCP connection

C2_B :

BGP neighbor is 192.168.2.2, remote AS 40002, internal link

BGP version 4, remote router ID 200.0.1.1

BGP state = Established, up for 00:01:24

Last read 00:00:26, last write 00:00:14, hold time is 180, keepalive interval is 60 seconds

Neighbor sessions:

1 active, is not multisession capable (disabled)

Neighbor capabilities:

Route refresh: advertised and received(new)

Four-octets ASN Capability: advertised and received

Address family IPv4 Unicast: advertised and received

Enhanced Refresh Capability: advertised and received

Multisession Capability:

Stateful switchover support enabled: NO for session 1

Message statistics:

InQ depth is 0

OutQ depth is 0

Sent Rcvd

Opens: 1 1

Notifications: 0 0

Updates: 2 2

Keepalives: 2 3

Route Refresh: 0 0

Total: 5 6

Default minimum time between advertisement runs is 0 seconds

For address family: IPv4 Unicast

Session: 192.168.2.2

BGP table version 3, neighbor version 3/0

Output queue size : 0

Index 2, Advertise bit 0

2 update-group member

Slow-peer detection is disabled

Slow-peer split-update-group dynamic is disabled

Interface associated: (none)

Sent Rcvd

Prefix activity: ---- ----

Prefixes Current: 2 1 (Consumes 80 bytes)

Prefixes Total: 2 1

Implicit Withdraw: 0 0

Explicit Withdraw: 0 0

Used as bestpath: n/a 0

Used as multipath: n/a 0

Outbound Inbound

Local Policy Denied Prefixes: -------- -------

Total: 0 0

Number of NLRIs in the update sent: max 2, min 0

Last detected as dynamic slow peer: never

Dynamic slow peer recovered: never

Refresh Epoch: 1

Last Sent Refresh Start-of-rib: never

Last Sent Refresh End-of-rib: never

Last Received Refresh Start-of-rib: never

Last Received Refresh End-of-rib: never

Sent Rcvd

Refresh activity: ---- ----

Refresh Start-of-RIB 0 0

Refresh End-of-RIB 0 0

Address tracking is enabled, the RIB does have a route to 192.168.2.2

Connections established 2; dropped 1

Last reset 00:01:25, due to Router ID changed of session 1

Transport(tcp) path-mtu-discovery is enabled

Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 255

Local host: 192.168.2.1, Local port: 31304

Foreign host: 192.168.2.2, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0 mis-ordered: 0 (0 bytes)

Event Timers (current time is 0xD657A20):

Timer Starts Wakeups Next

Retrans 4 0 0x0

TimeWait 0 0 0x0

AckHold 4 1 0x0

SendWnd 0 0 0x0

KeepAlive 0 0 0x0

GiveUp 0 0 0x0

PmtuAger 1 0 0xD6D56C4

DeadWait 0 0 0x0

Linger 0 0 0x0

ProcessQ 0 0 0x0

iss: 158484237 snduna: 158484415 sndnxt: 158484415

irs: 498479643 rcvnxt: 498479836

sndwnd: 16207 scale: 0 maxrcvwnd: 16384

rcvwnd: 16192 scale: 0 delrcvwnd: 192

SRTT: 413 ms, RTTO: 3205 ms, RTV: 2792 ms, KRTT: 0 ms

minRTT: 0 ms, maxRTT: 1000 ms, ACK hold: 200 ms

uptime: 84764 ms, Sent idletime: 14108 ms, Receive idletime: 14108 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 8 (out of order: 0), with data: 5, total data bytes: 192

Sent: 9 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 4, total data bytes: 177

Packets received in fast path: 0, fast processed: 0, slow path: 0

fast lock acquisition failures: 0, slow path: 0

TCP Semaphore 0x31D2BB84 FREE

BGP neighbor is 213.111.0.1, remote AS 40001, external link

BGP version 4, remote router ID 0.0.0.0

BGP state = Idle

Neighbor sessions:

0 active, is not multisession capable (disabled)

Stateful switchover support enabled: NO

Default minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

BGP table version 3, neighbor version 1/3

Output queue size : 0

Index 0, Advertise bit 0

Slow-peer detection is disabled

Slow-peer split-update-group dynamic is disabled

Interface associated: (none)

Sent Rcvd

Prefix activity: ---- ----

Prefixes Current: 0 0

Prefixes Total: 0 0

Implicit Withdraw: 0 0

Explicit Withdraw: 0 0

Used as bestpath: n/a 0

Used as multipath: n/a 0

Outbound Inbound

Local Policy Denied Prefixes: -------- -------

Total: 0 0

Number of NLRIs in the update sent: max 0, min 0

Last detected as dynamic slow peer: never

Dynamic slow peer recovered: never

Refresh Epoch: 1

Last Sent Refresh Start-of-rib: never

Last Sent Refresh End-of-rib: never

Last Received Refresh Start-of-rib: never

Last Received Refresh End-of-rib: never

Sent Rcvd

Refresh activity: ---- ----

Refresh Start-of-RIB 0 0

Refresh End-of-RIB 0 0

Address tracking is enabled, the RIB does have a route to 213.111.0.1

Connections established 0; dropped 0

Last reset never

Transport(tcp) path-mtu-discovery is enabled

Graceful-Restart is disabled

No active TCP connection

Relation BGPne marche pas

Liens rapides