02-20-2011 07:53 PM - edited 03-04-2019 11:29 AM
I am trying to set up a new router for training.
I am attempting to my First BGP multihome.
The router is a 2921.
We have a bonded t1 line and a metro ethernet connection
we have 2 /24 networks 1 /23 and 1 ipv6 /48
Behind the cisco router we have 3 Open BSD firewall Pairs, that are used to segment the networks into the production, development and my lab.
one of the /24 and the ipv6 block are veriably subneted, these are the routes that I am having troubles with.
I am attempting to aggregrate the /24 and the ipv6 block to go out to the internet.
they show up in the routing table as advertised but you can not reach any hosts through the cisco router.
Any ideas on this would be greatly appriciated.
here is the bgp config
address-family ipv4
network 24.104.xxx.240 mask 255.255.255.240
network 204.17.xxx.0 mask 255.255.254.0
network 204.138.xxx.0
network 192.231.xxx.0
aggregate-address 204.138.167.0 255.255.255.0 as-set summary-only
redistribute static route-map rm_redist_ok
neighbor 24.104.64.105 activate
neighbor 24.104.64.105 remove-private-as
neighbor 24.104.64.105 soft-reconfiguration inbound
neighbor 24.104.64.105 route-map rm_peer_1_in in
neighbor 24.104.64.105 route-map rm_peer_1_out out
no neighbor 2001:559:0:80::11 activate
neighbor 64.223.133.37 soft-reconfiguration inbound
neighbor 64.223.133.37 route-map rm_peer_2_in in
neighbor 64.223.133.37 route-map rm_peer_2_out out
no auto-summary
exit-address-family
!
address-family ipv6
redistribute static route-map ipv6_redist_ok
network 2620:xx::/48
aggregate-address 2620:17::/48 as-set summary-only
neighbor 2001:559:0:80::11 activate
neighbor 2001:559:0:80::11 remove-private-as
neighbor 2001:559:0:80::11 route-map rm_peer_1_in in
neighbor 2001:559:0:80::11 route-map rm_peer_1_out out
exit-address-family
My static routes
ip route 64.223.xxx.64 255.255.255.240 204.138.xxx.140 10 name Pro-gate
ip route 192.231.xxx.0 255.255.255.0 204.138.xxx.160 10 name Dev-Gate
ip route 204.17.xxx.0 255.255.254.0 204.138.xxx.160 10 name Dev-Gate
ip route 204.138.xxx.0 255.255.255.128 204.138.xxx.140 10 name Pro-Gate
ip route 204.138.xxx.192 255.255.255.192 204.138.xxx.170 10 name Lab-Gate
IPv6 static routes Currently all point to the lab
02-20-2011 08:55 PM
Hi Steven,
Is it possible for you to paste in "sh ip bgp" and also the route-maps config
Thanks
Regards,
02-21-2011 05:07 AM
Here are the route map configs, My ISP is giving us full internet routes so the out put of sh ip bgp is over 32 mb, just a bit big for a forum posting
in its lew I have inclded the output of sh ip bgp neighbors, and the routes advertised.
BGP neighbor is 24.104.64.105, remote AS 7922, external link
Description: Comcast
BGP version 4, remote router ID 68.86.1.67
BGP state = Established, up for 3d16h
Last read 00:00:00, last write 00:00:42, hold time is 180, keepalive interval is 60 seconds
Neighbor sessions:
1 active, is multisession capable
Neighbor capabilities:
Route refresh: advertised and received(new)
Four-octets ASN Capability: advertised
Address family IPv4 Unicast: advertised and received
Graceful Restart Capability: received
Remote Restart timer is 120 seconds
Address families advertised by peer:
IPv4 Unicast (was not preserved)
Multisession Capability: advertised and received
Message statistics, state Established:
InQ depth is 0
OutQ depth is 0
Sent Rcvd
Opens: 1 1
Notifications: 0 0
Updates: 13 456462
Keepalives: 5820 9
Route Refresh: 0 0
Total: 5834 456472
Default minimum time between advertisement runs is 30 seconds
For address family: IPv4 Unicast
Session: 24.104.64.105 session 1
BGP table version 1760862, neighbor version 1760862/0
Output queue size : 0
Index 4
4 update-group member
Inbound soft reconfiguration allowed
Private AS number removed from updates to this neighbor
Inbound path policy configured
Outbound path policy configured
Route map for incoming advertisements is rm_peer_1_in
Route map for outgoing advertisements is rm_peer_1_out
Slow-peer detection is disabled
Slow-peer split-update-group dynamic is disabled
Sent Rcvd
Prefix activity: ---- ----
Prefixes Current: 3 342510 (Consumes 35621040 bytes)
Prefixes Total: 11 1798323
Implicit Withdraw: 6 1387299
Explicit Withdraw: 2 68514
Used as bestpath: n/a 342510
Used as multipath: n/a 0
Saved (soft-reconfig): n/a 342510 (Consumes 17810520 bytes)
Outbound Inbound
Local Policy Denied Prefixes: -------- -------
AS_PATH loop: n/a 5
Bestpath from this peer: 6 n/a
Suppressed due to dampening: 6 n/a
Invalid Path: 68517 n/a
Other Policies: 2376293 n/a
Total: 2444822 5
Number of NLRIs in the update sent: max 2, min 0
Last detected as dynamic slow peer: never
Dynamic slow peer recovered: never
Address tracking is enabled, the RIB does have a route to 24.104.64.105
Connections established 4; dropped 3
Last reset 3d16h, due to Peer closed the session
Transport(tcp) path-mtu-discovery is enabled
Graceful-Restart is disabled
Connection state is ESTAB, I/O status: 1, unread input bytes: 0
Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1
Local host: 24.104.64.106, Local port: 49233
Foreign host: 24.104.64.105, Foreign port: 179
Connection tableid (VRF): 0
Maximum output segment queue size: 50
Enqueued packets for retransmit: 0, input: 0 mis-ordered: 0 (0 bytes)
Event Timers (current time is 0x189B9D64):
Timer Starts Wakeups Next
Retrans 5833 0 0x0
TimeWait 0 0 0x0
AckHold 94095 73982 0x0
SendWnd 0 0 0x0
KeepAlive 0 0 0x0
GiveUp 0 0 0x0
PmtuAger 484114 484113 0x189B9F3D
DeadWait 0 0 0x0
Linger 0 0 0x0
ProcessQ 0 0 0x0
iss: 2854086735 snduna: 2854198028 sndnxt: 2854198028
irs: 4170065237 rcvnxt: 4209371521
sndwnd: 16327 scale: 0 maxrcvwnd: 16384
rcvwnd: 15330 scale: 0 delrcvwnd: 1054
SRTT: 650 ms, RTTO: 653 ms, RTV: 3 ms, KRTT: 0 ms
minRTT: 4 ms, maxRTT: 650 ms, ACK hold: 200 ms
Status Flags: active open
Option Flags: nagle, path mtu capable
IP Precedence value : 6
Datagrams (max data segment is 1460 bytes):
Rcvd: 107177 (out of order: 0), with data: 101195, total data bytes: 39306283
Sent: 103620 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 5833, total data bytes: 111292
Packets received in fast path: 0, fast processed: 0, slow path: 0
fast lock acquisition failures: 0, slow path: 0
route-map rm_redist_ok permit 10
match ip address 1301
!
route-map rm_peer_1_out permit 5
match ip address prefix-list pl_peer_1_out
match ipv6 address prefix-list pl_peer_1_out
set as-path prepend 16434
!
route-map rm_peer_2_out permit 5
set as-path prepend 16434
!
route-map ipv6_redist_ok permit 10
match policy-list ipv6_redist
!
route-map rm_peer_1_in permit 5
set local-preference 150
!
route-map rm_peer_2_in permit 5
set local-preference 50
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide