SDWAN BGP MPLS ROUTING ISSUES

[kimaruanthony]

We have troubleshooting on failover and redundancy for one of our clients who has 7 branches all on Cisco SDWAN with cisco cloud hosted controller.

The branches have two MPLS links from different providers and an LTE for redundancy and load balancing to HQ site.

The LTE was meant to provide connectivity to SDWAN controller in case there are outages on MPLS. Most of the time it has no connectivity since it freezes a lot.

The main issue is on the MPLS link, one of the MPLS PRIVATE2 works well but the second has major issues. These MPLS are using BGP as routing protocol. Private1 link is unable to connect when there are outages on private2. Both links can establish control connections but the bfd and tunnels for private1 do not come up.

Further troubleshoots indicate that the MPLS provider for Private1 sees routes for all branches from all our edge routers on their PE routers. They informed us that we are advertising all our 7 branches routes on each router. This is producing routing loops on their MPLS network and that is why we are unable to even ping their IPs on our branch router from another.

Please advise on

1. Why the provide seeing all the routes for all branches coming from our branch router yet on BGP we are only advertising P2P IP for both providers
2. What configuration do we need to adjust to have both links working
3. How can we improve reliability on LTE

KIND REGARD

[kimaruanthony]

hi here is my configurations on the routers

[balaji.bandi]

Are you using BGP only with Provider ? can you show is example what provider receiving -

You can use Prefix list to filter the route going out from EDGE routers.

[kimaruanthony]

yes am using BGP only to advertise to both MPLS provider. I have attached the route recieved by the provider. Please point out the posible configuration for the BGP filters

[balaji.bandi · Accepted solution]

Can you check the edge router to see what routes are being sent?

show ip bgp neighbors x.x.x.x advertised-routes

 The example below gives you direction  - understand the syntax and apply and test it.

ip prefix-list ADVERTISE_ONLY seq 5 permit x.x.x.x/24
ip prefix-list ADVERTISE_ONLY seq 10 permit y.y.y.y/24

route-map ADVERTISE_OUT permit 10
match ip address prefix-list ADVERTISE_ONLY

router bgp 000000
neighbor z.z.z.z remote-as 11111
neighbor z.z.z.z route-map ADVERTISE_OUT out

show ip prefix-list ADVERTISE_ONLY
show route-map ADVERTISE_OUT

If you like to clear :

clear ip bgp z.z.z.z out

[kimaruanthony]

hi

thank you for the response

I have attached the advertised routes. both for HQ and branch routers am working on the script for loading to the routers

KIND REGARD

[kimaruanthony]

balaji.bandi,

This route-map solution has worked for me and both of my link are working fine on 4 branches now. We did this using CLI tomorrow we will be working on Vmanage GUI. 

t

Preview

[balaji.bandi]

I'm glad everything is good and the solution worked.

[kimaruanthony]

Am so greatful for your help 

If you dont mind Kindly share any insight on

1. how to translate this cli to a vmanage policy and  template since it seems we have to create a unique template for each branch router

2. How we can do an automatic restart on LTE when it has no connection to the LTE network. Maybe on outga or after maybe 4hours. Currently we have to login to the router and check if it has connectivity to run hw-platform reset command to re-establish connectivity 

KIND REGARDS 

[balaji.bandi]

check the template example :

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/system-interface/ios-xe-17/systems-interfaces-book-xe-sdwan/cli-template.html

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/configuration/routing/ios-xe-17/routing-book-xe/m-unicast-routing.html#concept_gbw_f4p_13b