cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1045
Views
0
Helpful
2
Replies

BGP Routing question

Steven Peterson
Level 1
Level 1

I am trying to set up a new router for training.

I am attempting to my First BGP multihome.

The router is a 2921.

We have a bonded t1 line and a metro ethernet connection

we have 2 /24 networks 1 /23 and 1 ipv6 /48

Behind the cisco router we have 3 Open BSD firewall Pairs, that are used to segment the networks into the production, development and my lab.

one of the /24 and the ipv6 block are veriably subneted, these are the routes that I am having troubles with.

I am attempting to aggregrate the /24 and the ipv6 block to go out to the internet.

they show up in the routing table as advertised but you can not reach any hosts through the cisco router.

Any ideas on this would be greatly appriciated.

here is the bgp config

address-family ipv4

  network 24.104.xxx.240 mask 255.255.255.240

  network 204.17.xxx.0 mask 255.255.254.0

  network 204.138.xxx.0

  network 192.231.xxx.0

  aggregate-address 204.138.167.0 255.255.255.0 as-set summary-only

  redistribute static route-map rm_redist_ok

  neighbor 24.104.64.105 activate

  neighbor 24.104.64.105 remove-private-as

  neighbor 24.104.64.105 soft-reconfiguration inbound

  neighbor 24.104.64.105 route-map rm_peer_1_in in

  neighbor 24.104.64.105 route-map rm_peer_1_out out

  no neighbor 2001:559:0:80::11 activate

  neighbor 64.223.133.37 soft-reconfiguration inbound

  neighbor 64.223.133.37 route-map rm_peer_2_in in

  neighbor 64.223.133.37 route-map rm_peer_2_out out

  no auto-summary

exit-address-family

!

address-family ipv6

  redistribute static route-map ipv6_redist_ok

  network 2620:xx::/48

  aggregate-address 2620:17::/48 as-set summary-only

  neighbor 2001:559:0:80::11 activate

  neighbor 2001:559:0:80::11 remove-private-as

  neighbor 2001:559:0:80::11 route-map rm_peer_1_in in

  neighbor 2001:559:0:80::11 route-map rm_peer_1_out out

exit-address-family

My static routes

ip route 64.223.xxx.64 255.255.255.240 204.138.xxx.140 10 name Pro-gate

ip route 192.231.xxx.0 255.255.255.0 204.138.xxx.160 10 name Dev-Gate

ip route 204.17.xxx.0 255.255.254.0 204.138.xxx.160 10 name Dev-Gate

ip route 204.138.xxx.0 255.255.255.128 204.138.xxx.140 10 name Pro-Gate

ip route 204.138.xxx.192 255.255.255.192 204.138.xxx.170 10 name Lab-Gate

IPv6 static routes Currently all point to the lab

ipv6 route 2620:xx:0:1A00::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A01::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A02::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A03::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A04::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0A::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0B::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0C::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0D::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0E::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
ipv6 route 2620:xx:0:1A0F::/64 2620:xx:0:1B00:59AE:3D27:C74C:9525 10
2 Replies 2

Hi Steven,

Is it possible for you to paste in "sh ip bgp" and also the route-maps config

Thanks

Regards,

Here are the route map configs, My ISP is giving us full internet routes so the out put of sh ip bgp is over 32 mb, just a bit big for a forum posting

in its lew I have inclded the output of sh ip bgp neighbors, and the routes advertised.

BGP neighbor is 24.104.64.105,  remote AS 7922, external link

Description: Comcast

  BGP version 4, remote router ID 68.86.1.67

  BGP state = Established, up for 3d16h

  Last read 00:00:00, last write 00:00:42, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is multisession capable

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised

    Address family IPv4 Unicast: advertised and received

    Graceful Restart Capability: received

      Remote Restart timer is 120 seconds

      Address families advertised by peer:

        IPv4 Unicast (was not preserved)

    Multisession Capability: advertised and received

  Message statistics, state Established:

    InQ depth is 0

    OutQ depth is 0

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:               13     456462

    Keepalives:          5820          9

    Route Refresh:          0          0

    Total:               5834     456472

  Default minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

  Session: 24.104.64.105 session 1

  BGP table version 1760862, neighbor version 1760862/0

  Output queue size : 0

  Index 4

  4 update-group member

  Inbound soft reconfiguration allowed

  Private AS number removed from updates to this neighbor

  Inbound path policy configured

  Outbound path policy configured

  Route map for incoming advertisements is rm_peer_1_in

  Route map for outgoing advertisements is rm_peer_1_out

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               3     342510 (Consumes 35621040 bytes)

    Prefixes Total:                11    1798323

    Implicit Withdraw:              6    1387299

    Explicit Withdraw:              2      68514

    Used as bestpath:             n/a     342510

    Used as multipath:            n/a          0

    Saved (soft-reconfig):        n/a     342510 (Consumes 17810520 bytes)

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    AS_PATH loop:                       n/a          5

    Bestpath from this peer:              6        n/a

    Suppressed due to dampening:          6        n/a

    Invalid Path:                     68517        n/a

    Other Policies:                 2376293        n/a

    Total:                          2444822          5

  Number of NLRIs in the update sent: max 2, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Address tracking is enabled, the RIB does have a route to 24.104.64.105

  Connections established 4; dropped 3

  Last reset 3d16h, due to Peer closed the session

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0           

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 24.104.64.106, Local port: 49233

Foreign host: 24.104.64.105, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x189B9D64):

Timer          Starts    Wakeups            Next

Retrans          5833          0             0x0

TimeWait            0          0             0x0

AckHold         94095      73982             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger       484114     484113      0x189B9F3D

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss: 2854086735  snduna: 2854198028  sndnxt: 2854198028

irs: 4170065237  rcvnxt: 4209371521

sndwnd:  16327  scale:      0  maxrcvwnd:  16384

rcvwnd:  15330  scale:      0  delrcvwnd:   1054

SRTT: 650 ms, RTTO: 653 ms, RTV: 3 ms, KRTT: 0 ms

minRTT: 4 ms, maxRTT: 650 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 107177 (out of order: 0), with data: 101195, total data bytes: 39306283

Sent: 103620 (retransmit: 0, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 5833, total data bytes: 111292

Packets received in fast path: 0, fast processed: 0, slow path: 0

fast lock acquisition failures: 0, slow path: 0

BGP table version is 1761515, local router ID is 24.104.64.106
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
              r RIB-failure, S Stale, m multipath, b backup-path, x best-external
Origin codes: i - IGP, e - EGP, ? - incomplete
   Network          Next Hop            Metric LocPrf Weight Path
*> 24.104.xxx.240/28
                    0.0.0.0                  0         32768 i
*> 204.17.xxx.0/23  204.138.xxx.160          0         32768 i
*> 204.138.xxx.0    0.0.0.0                            32768 i
Total number of prefixes 3

route-map rm_redist_ok permit 10

match ip address 1301

!

route-map rm_peer_1_out permit 5

match ip address prefix-list pl_peer_1_out

match ipv6 address prefix-list pl_peer_1_out

set as-path prepend 16434

!

route-map rm_peer_2_out permit 5

set as-path prepend 16434

!

route-map ipv6_redist_ok permit 10

match policy-list ipv6_redist

!

route-map rm_peer_1_in permit 5

set local-preference 150

!

route-map rm_peer_2_in permit 5

set local-preference 50

ipv6 access-list ipv6_redist
permit ipv6 2620:xx::/48 any
ip prefix-list pl_peer_1_in seq 5 deny 10.0.0.0/8
ip prefix-list pl_peer_1_in seq 10 deny 172.16.0.0/12
ip prefix-list pl_peer_1_in seq 15 deny 192.168.0.0/16
ip prefix-list pl_peer_1_in seq 20 deny 169.254.0.0/16
ip prefix-list pl_peer_1_in seq 25 deny 0.0.0.0/8
ip prefix-list pl_peer_1_in seq 30 deny 127.0.0.0/8
ip prefix-list pl_peer_1_in seq 35 deny 198.18.0.0/15
ip prefix-list pl_peer_1_in seq 40 deny 192.0.2.0/24
ip prefix-list pl_peer_1_in seq 45 deny 198.51.100.0/24
ip prefix-list pl_peer_1_in seq 50 deny 203.0.113.0/24
ip prefix-list pl_peer_1_in seq 55 permit 0.0.0.0/0
!
ip prefix-list pl_peer_1_out seq 5 permit 204.17.xxx.0/23
ip prefix-list pl_peer_1_out seq 10 permit 192.231.xxx.0/24
ip prefix-list pl_peer_1_out seq 15 permit 204.138.xxx.0/24
ip prefix-list pl_peer_1_out seq 20 permit 24.104.xxx.240/28
!
ip prefix-list pl_peer_2_in seq 5 deny 10.0.0.0/8
ip prefix-list pl_peer_2_in seq 10 deny 172.16.0.0/12
ip prefix-list pl_peer_2_in seq 15 deny 192.168.0.0/16
ip prefix-list pl_peer_2_in seq 20 deny 169.254.0.0/16
ip prefix-list pl_peer_2_in seq 25 deny 0.0.0.0/8
ip prefix-list pl_peer_2_in seq 30 deny 127.0.0.0/8
ip prefix-list pl_peer_2_in seq 35 deny 198.18.0.0/15
ip prefix-list pl_peer_2_in seq 40 deny 192.0.2.0/24
ip prefix-list pl_peer_2_in seq 45 deny 198.51.100.0/24
ip prefix-list pl_peer_2_in seq 50 deny 203.0.113.0/24
ip prefix-list pl_peer_2_in seq 55 permit 0.0.0.0/0
!
ip prefix-list pl_peer_2_out seq 5 permit 204.17.xxx.0/23
ip prefix-list pl_peer_2_out seq 10 permit 192.231.xxx.0/24
ip prefix-list pl_peer_2_out seq 15 permit 204.138.xxx.0/24
ip prefix-list pl_peer_2_out seq 20 permit 24.104.xxx.240/28