Active/Active, multi homed BGP, dual router , HSRP config

[jagdev.dhaliwal]

Hello All,

I have

Active/Active, multi homed BGP, dual router , HSRP config on LAN,  Now I want to  change the HSRP priority to avoid one extra hop in case one ISP fails, I want to use the EEM feature instead of IP SLA  which I am currently using But It’s the first time I am trying to use this,

Can you guys help me to find whether my EEM config is good enough to achieve what I am trying to achieve or I need to make some changes to this config

ISP1

event manager applet track-bgp-down

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 10.10.10.17 Down BGP Notification sent"

action 1.0 syslog priority critical msg "EBGP Session to peer is down"

action 2.0 cli command "enable"

action 3.0 cli command "conifg t"

action 4.0 cli command "FastEthernet0/1.90"

action 5.0 cli command " standby 12 priority 85 "

action 6.0 cli command "end"

event manager applet track-bgp-up

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 10.10.10.17 Up"

action 1.0 syslog priority critical msg "EBGP Session to peer is up"

action 2.0 cli command "enable"

action 3.0 cli command "conifg t"

action 4.0 cli command "FastEthernet0/1.90"

action 5.0 cli command " standby 12 priority 110 "

action 6.0 cli command "end"

ISP2

event manager applet track-bgp-down

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 20.20.20.41 Down BGP Notification sent"

action 1.0 syslog priority critical msg "EBGP Session to peer is down"

action 2.0 cli command "enable"

action 3.0 cli command "conifg t"

action 4.0 cli command "FastEthernet0/1.90"

action 5.0 cli command " standby 11 priority 85 "

action 6.0 cli command "end"

event manager applet track-bgp-up

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 20.20.20.41 Up"

action 1.0 syslog priority critical msg "EBGP Session to peer is up"

action 2.0 cli command "enable"

action 3.0 cli command "conifg t"

action 4.0 cli command "interface FastEthernet0/1.90"

action 5.0 cli command " standby 11 priority 110 "

action 6.0 cli command "end"

Thanks

Jagdev

[avayner]

Jagdev,

I this configuration should work assuming you have preemption configured on the HSRP config.

Another approach to making HSRP react, without changing configs, could be to use tracking objects.

I also added a delay in the preempt statement because I would expect that it takes a while between the BGP session is up and the routing tables are actually installed...

!

track 10 stub-object

default-state up

!

interface Ethernet0/0

ip address 10.1.1.100 255.255.255.0

standby 1 ip 10.1.1.1

standby 1 preempt delay minimum 60

standby 1 track 10 shutdown

!

event manager applet track-bgp-down

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 20.20.20.41 Down BGP Notification sent"

action 1.0 syslog priority critical msg "EBGP Session to peer is down"

action 2.0 track set 10 state down

!

event manager applet track-bgp-up

event syslog pattern "%BGP-5-ADJCHANGE: neighbor 20.20.20.41 Up"

action 1.0 syslog priority critical msg "EBGP Session to peer is up"

action 2.0 track set 10 state up

!

[eahmed007]

Hi,

I have configured EBGP between to Internet service provider and configured HSRP with IBGP for High-Availability for Local traffic. In this Network Topology, I have two Firewalls behind Two Routers where I configured EBPG Multi-homing.

ISP01                                 ISP02

     EBGP                             EBGP

Router01         IBGP     Router02

                    HSRP

Firewall01           Firewall02

I have one global network block 105.X.X.X/23. My intention is to use both ISP active for 105.X.X.X/24 and 105.X.Y.X/24 while configuring EBGP Multi-homing with HSRP protocol. That means 105.X.X.X/24 will use one ISP for incoming and outgoing traffic and 105.X.Y.X/24 will use other ISP and fail-over happens in case of one ISP goes down.

Can you tell me how I can configure to achieve this Active/Active High-Availability configuring BGP with HSRP protocol and keeping Firewall behind for LAN Network.

I am looking forward to your assistance.

With Regards

Erfan