cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
429
Views
1
Helpful
15
Replies

Routing issue with Cisco DNA

Hi,

I have a DNA fabric network, consist of border routers and fusion, edge connected to borders:

Edge1 --------- Border1-------Fusion1

Edge1 --------- Border2-------Fusion2

Borders have iBGP between them, Fusion1 and Fusion2 have iBGP as well,

Behind edge there is subnet lets say 10.90.0.0/22 and I have routes to the devices in via LISP and BGP (between borders):

B1:

*> 10.90.0.0/22 0.0.0.0 32768 i - this are received from peer B2 with aggregate address summary-only command* i 172.16.12.174 0 100 0 i
s> 10.90.0.20/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.0.21/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.3.254/32 0.0.0.0 0 32768 i - this are redistributed to BGP from LISP

B2:

*> 10.90.0.0/22 0.0.0.0 32768 i - this are received from peer B2 with aggregate address summary-only command* i 172.16.12.173 0 100 0 i
s> 10.90.0.20/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.0.21/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.3.254/32 0.0.0.0 0 32768 i - this are redistributed to BGP from LISP

Problem is, I have Edge switch connected to both of this borders, when lets say link from Edge to B1 is down, LISP route goes down and logically it should sent traffic through B2, but the problem is that BGP best path points to 0.0.0.0 and being blackholed, second path in BGP routing table which is peer IP (in this case 172.16.12.174) never used, this happens because "aggregate address summary only command" injectw 0.0.0.0 into BGP and choosing it as the best in BGP routing table, and beside that there is redistributed from LISP 3 routes with metric 10

I'm trying to understand if its kind of LISP/BGP routing loop, its DNA network and all this aggregates are pushed by DNA, I wonder if we need to add some additional configuration beside automated by DNA to avoid this?

Let me know if you need additional details

 

15 Replies 15

BORDER_NODE1#show lisp site
Register Registered ID
site_uci never no -- 4097 10.90.0.0/22
02:53:18 yes# 10.112.2.1:29420 4097 10.90.0.20/32
02:53:17 yes# 10.112.2.8:19379 4097 10.90.0.21/32
02:54:01 yes# 10.112.2.21:32729 4097 10.90.0.23/32

BORDER_NODE2#show lisp site
site_uci never no -- 4097 10.90.0.0/22
14:49:44 yes# 10.112.2.1:46616 4097 10.90.0.20/32
14:49:49 yes# 10.112.2.8:21701 4097 10.90.0.21/32
02:54:23 yes# 10.112.2.21:18349 4097 10.90.0.23/32

 


Edge#show lisp site
LISP Site Registration Information

HeadOffice_Edge-2#