05-10-2024 08:59 AM
the router looks fine and show ip bgp is correct
R2 can't reach ISP by going to R1 to ISP
*******************************************************************************************************
R1
no license smart enable
!
!
spanning-tree extend system-id
!
interface Loopback0
ip address 160.12.45.11 255.255.255.255
no ip proxy-arp
!
interface GigabitEthernet0/0/0
ip address 160.45.45.26 255.255.255.252
no ip proxy-arp
load-interval 30
negotiation auto
!
interface GigabitEthernet0/0/2
description ;;OUTSIDESwitch;;
ip address 160.12.45.41 255.255.255.248
standby 1 ip 160.12.45.43
standby 1 priority 105
standby 1 preempt
logging event link-status
negotiation auto
cdp enable
arp timeout 1
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/4
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/5
description IBGP connect
ip address 10.12.1.1 255.255.255.252
negotiation auto
!
router bgp 65001
bgp router-id 160.12.45.11
bgp log-neighbor-changes
neighbor 160.45.45.26 remote-as 6056
neighbor 160.45.45.26 version 4
neighbor 160.12.45.12 remote-as 65001
neighbor 160.12.45.12 description IBGP to WAN-02
neighbor 160.12.45.12 update-source Loopback0
!
address-family ipv4
network 160.45.0.0
network 160.45.11 mask 255.255.255.255
neighbor 160.45.45.26 activate
neighbor 160.45.45.26 soft-reconfiguration inbound
neighbor 160.45.45.26 route-map umats-in-new-prefix in
neighbor 160.12.45.12 activate
neighbor 160.12.45.12 next-hop-self
neighbor 160.12.45.12 soft-reconfiguration inbound
exit-address-family
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 160.45.0.0 255.255.0.0 Null0
ip route 160.12.45.12 255.255.255.255 10.12.1.2
!
!
ip prefix-list default_in seq 5 permit 0.0.0.0/0
!
ip prefix-list to-test-prefix seq 5 permit 160.45.0.0/16
ip prefix-list to-test-prefix seq 10 permit 160.12.45.11/32
ip prefix-list to-test-prefix seq 15 permit 160.12.45.12/32
ip prefix-list to-test-prefix seq 25 permit 10.21.240.0/24
ip prefix-list to-test-prefix seq 30 permit 78.124.249.0/24
ip prefix-list to-test-prefix seq 35 permit 9.59.146.240/28
ip prefix-list to-test-prefix seq 40 permit 0.0.0.0/0
!
!
route-map umats-in-new-prefix permit 10
set local-preference 200
!
route-map to-umats permit 10
match ip address prefix-list to-test-prefix
R1
*************************************************************************************************************
********************************************************************************************************
R2
no license smart enable
!
!
spanning-tree extend system-id
diagnostic bootup level minimal
!
!
!
interface Loopback0
ip address 60.12.45.12 255.255.255.255
interface GigabitEthernet0/0/0
description PG INT
ip address 160.45.45.66 255.255.255.252
no ip proxy-arp
load-interval 30
negotiation auto
!
interface GigabitEthernet0/0/2
description ;;OUTSIDESwitch;;
ip address 160.12.45.42 255.255.255.248
standby 1 ip 160.12.45.43
standby 1 preempt
logging event link-status
negotiation auto
cdp enable
arp timeout 1
!
interface GigabitEthernet0/0/3
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/4
no ip address
shutdown
negotiation auto
!
interface GigabitEthernet0/0/5
description IBGP connect
ip address 10.12.1.2 255.255.255.252
negotiation auto
!
router bgp 65001
bgp router-id 60.12.45.12
bgp log-neighbor-changes
neighbor 160.45.45.65 remote-as 6056
neighbor 160.45.45.65 version 4
neighbor 160.12.45.11 remote-as 22877
neighbor 160.12.45.11 description IBGP to WAN-01
neighbor 160.12.45.11 update-source Loopback0
!
address-family ipv4
network 160.45.0.0
network 60.12.45.12 mask 255.255.255.255
neighbor 160.45.45.65 activate
neighbor 160.45.45.65 soft-reconfiguration inbound
neighbor 160.45.45.65 route-map to-umats-prefix out
neighbor 160.12.45.11 activate
neighbor 160.12.45.11 next-hop-self
neighbor 160.12.45.11 soft-reconfiguration inbound
exit-address-family
!
ip forward-protocol nd
!
ip http server
ip http authentication local
ip http secure-server
ip tftp source-interface GigabitEthernet0
ip route 160.45.0.0 255.255.0.0 Null0
ip route 160.12.45.11 255.255.255.255 10.12.1.1
!
!
ip prefix-list default_in seq 5 permit 0.0.0.0/0
!
ip prefix-list to-umats-prefix seq 5 permit 150.21.240.0/24
ip prefix-list to-umats-prefix seq 10 permit 78.124.249.0/24
ip prefix-list to-umats-prefix seq 15 permit 4.59.146.240/28
!
ip prefix-list to-umats-prepend seq 5 permit 131.171.0.0/16
!
!
route-map umats-in-new-prefix permit 10
set local-preference 50
!
route-map to-umats-prefix permit 10
match ip address prefix-list to-umats-prepend
set as-path prepend 65001 65001 65001
!
route-map to-umats-prefix permit 20
match ip address prefix-list to-umats-prefix
!
!
!
05-15-2024 10:24 AM
I started a new to make it easier
https://community.cisco.com/t5/routing/please-check-my-bgp-configuration/m-p/5105169#M399147
05-15-2024 01:14 PM
It was done in the ISP side and I have create lab config for review and any suggestion for best practices
https://community.cisco.com/t5/routing/please-check-my-bgp-configuration/m-p/5105208#M399149
05-15-2024 01:08 PM
when i did this in the lab it knew R1 was default but it's best practices to do it add this?
05-14-2024 08:23 AM
Thank you and what is common way ISP adv default route?
neighbor x.x.x.x default-originate
Soon I put in my prefix-list it stop working
you have a good guild for for ISP?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide