BGP updates

[edward.mirzaian]

Hi All,

I hope someone can help me with this question.

We are in process of configuring BGP for our multi-homed site,we have a VPN remote access configured behind our router on a firewall,let's say one of our links fail,do we get a failover for our VPN connection for outside users connecting to VPN gateway? 

What kind of updates we need our ISP's to advertise to us (full,default route,partial update)?

[vivek srivastava]

If VPN clients are connecting over internet then you need full routes from different ISPs

But note that since it is a multihomed connection, you need a good network administration on WAN end.

[edward.mirzaian]

Thanks for your response Vivek.

Could you help me understand why I need to get full routes from different ISPs?

When I'm forming neighbor relationship with two ISP's,I have to advertise both public networks with my public AS number correct?

So why receiving a default route won't help me with this scenario?

Thanks.

Edward

[vivek srivastava]

HI Edward,

• do you have public AS assinged by any of the ISPs ?? (i know u mentioned in earlier post but just wanted to re-confirm)
• your VPN server public IP pool is given by which ISP i.e. ISP1 or ISP2 ??

[edward.mirzaian]

Hi Vivek,

Yes we have a public AS number and our pool is assigned by first ISP.

Thanks.