12-20-2023 12:01 AM
Hello
i want to know how i can loop prevention in EBGP cisco ?
i use allowas-in and AS-Override ?
what are attribue can loop prevention in session EBGP ?
Thanks
Solved! Go to Solution.
12-20-2023 12:10 AM - edited 12-20-2023 12:46 AM
12-20-2023
12:34 AM
- last edited on
12-20-2023
04:06 AM
by
Translator
Hello @dhikra-marghli8
In BGP, loop prevention is essential to avoid routing loops. In the context of EBGP, where routers in AS exchange routing information, certain attributes and techniques help in preventing loops. Here are a few key attributes and techniques:
BGP routers can perform a Time-to-Live security check on incoming EBGP updates. This involves verifying that the TTL value in the IP header of the received BGP update is greater than 1. If the TTL is 1, it indicates that the update has traversed only one router and might be loopingThe AS_PATH attribute contains a list of AS numbers through which the route has traversed. BGP routers use the AS_PATH to prevent routing loops. The
allowas-in
command is used to allow the same AS number to appear multiple times in the AS_PATH attribute. This is helpful when a route traverses the same AS multiple times (AS confederation scenarios).
AS-Override is another technique used to address issues in scenarios where BGP routers within the same AS use EBGP to peer with routers in another AS. AS-Override allows a router to advertise routes to its EBGP peer with the AS_PATH attribute modified to appear as if the routes originated within the local AS. This can help in scenarios where route reflection is used.
BGP confederation is a method to address the issue of scalability within an AS. In a confederation, an AS is divided into sub-ASes, and routers within the same sub-AS use EBGP to peer. Confederation sub-ASes are still part of the overall AS, and loop prevention is maintained through standard BGP mechanisms.
When using BGP route reflectors within an AS, the route reflectors help in distributing routes without causing loops. Clients of a route reflector receive routes without modification, and non-client routes are reflected with the next-hop attribute set to the IP address of the route reflector.
Site of Origin is a tool to help prevent routing loops in scenarios where there are redundant entry points into an AS, and it provides a way to mark and filter routes based on their origin site. This contributes to the stability and efficiency of routing in complex network topologies.
12-20-2023 12:35 AM
SiteA-ISP-SiteB
Now SiteA use same As as SiteB
We use allowas-in/override-as
The SiteB accept route from SiteA
Assume there is direct connect between two sites
SiteB will re advertise route to SiteA
Here SiteA using SoO know that origin of this prefix is itself and drop the route and prevent loop.
MHM
12-20-2023 12:40 AM
you ask about attribute and accpet solution of TTL which is data plane
I am confused
MHM
12-20-2023 01:09 AM
Other thread here:
https://yurmagccie.wordpress.com/2018/06/06/bgp-part-3-loop-prevention-mandatory-attributes/
12-20-2023 08:28 AM
the Lab is simple
there are two Loop
one control plane routing Loop
other is Data Loop
so we use SoO for routing Loop
you can see before the SoO I see 5.5.5.5/32 via two path one from R5 and other from R3 even so it originate from R5 itself.
after you use SoO, the R5 know that this prefix originate from it and drop it.
12-20-2023 12:10 AM - edited 12-20-2023 12:46 AM
MHM
12-20-2023 12:25 AM
thanks
i can't unterstant why Site of origin can prevent loop in EBGP ?
Thanks
12-20-2023 12:35 AM
SiteA-ISP-SiteB
Now SiteA use same As as SiteB
We use allowas-in/override-as
The SiteB accept route from SiteA
Assume there is direct connect between two sites
SiteB will re advertise route to SiteA
Here SiteA using SoO know that origin of this prefix is itself and drop the route and prevent loop.
MHM
12-20-2023 12:48 AM
Hello ,
Thanks for your help
12-20-2023 01:02 AM
Juste i want to know siteA==> it is CPE ?
12-20-2023 12:47 AM
I will share lab later today about this point SoO
thanks
MHM
12-20-2023
12:34 AM
- last edited on
12-20-2023
04:06 AM
by
Translator
Hello @dhikra-marghli8
In BGP, loop prevention is essential to avoid routing loops. In the context of EBGP, where routers in AS exchange routing information, certain attributes and techniques help in preventing loops. Here are a few key attributes and techniques:
BGP routers can perform a Time-to-Live security check on incoming EBGP updates. This involves verifying that the TTL value in the IP header of the received BGP update is greater than 1. If the TTL is 1, it indicates that the update has traversed only one router and might be loopingThe AS_PATH attribute contains a list of AS numbers through which the route has traversed. BGP routers use the AS_PATH to prevent routing loops. The
allowas-in
command is used to allow the same AS number to appear multiple times in the AS_PATH attribute. This is helpful when a route traverses the same AS multiple times (AS confederation scenarios).
AS-Override is another technique used to address issues in scenarios where BGP routers within the same AS use EBGP to peer with routers in another AS. AS-Override allows a router to advertise routes to its EBGP peer with the AS_PATH attribute modified to appear as if the routes originated within the local AS. This can help in scenarios where route reflection is used.
BGP confederation is a method to address the issue of scalability within an AS. In a confederation, an AS is divided into sub-ASes, and routers within the same sub-AS use EBGP to peer. Confederation sub-ASes are still part of the overall AS, and loop prevention is maintained through standard BGP mechanisms.
When using BGP route reflectors within an AS, the route reflectors help in distributing routes without causing loops. Clients of a route reflector receive routes without modification, and non-client routes are reflected with the next-hop attribute set to the IP address of the route reflector.
Site of Origin is a tool to help prevent routing loops in scenarios where there are redundant entry points into an AS, and it provides a way to mark and filter routes based on their origin site. This contributes to the stability and efficiency of routing in complex network topologies.
12-20-2023 12:39 AM
Bravo ...thanks again for your help .
12-20-2023 12:40 AM
you ask about attribute and accpet solution of TTL which is data plane
I am confused
MHM
12-20-2023 01:09 AM
Other thread here:
https://yurmagccie.wordpress.com/2018/06/06/bgp-part-3-loop-prevention-mandatory-attributes/
12-20-2023 08:28 AM
the Lab is simple
there are two Loop
one control plane routing Loop
other is Data Loop
so we use SoO for routing Loop
you can see before the SoO I see 5.5.5.5/32 via two path one from R5 and other from R3 even so it originate from R5 itself.
after you use SoO, the R5 know that this prefix originate from it and drop it.
12-20-2023 09:18 AM
Thanks for your reply and your help
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide