06-11-2024 06:10 AM
Hi,
I have a DNA fabric network, consist of border routers and fusion, edge connected to borders:
Edge1 --------- Border1-------Fusion1
Edge1 --------- Border2-------Fusion2
Borders have iBGP between them, Fusion1 and Fusion2 have iBGP as well,
Behind edge there is subnet lets say 10.90.0.0/22 and I have routes to the devices in via LISP and BGP (between borders):
B1:
*> 10.90.0.0/22 0.0.0.0 32768 i - this are received from peer B2 with aggregate address summary-only command* i 172.16.12.174 0 100 0 i
s> 10.90.0.20/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.0.21/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.3.254/32 0.0.0.0 0 32768 i - this are redistributed to BGP from LISP
B2:
*> 10.90.0.0/22 0.0.0.0 32768 i - this are received from peer B2 with aggregate address summary-only command* i 172.16.12.173 0 100 0 i
s> 10.90.0.20/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.0.21/32 0.0.0.0 10 32768 ? - this are redistributed to BGP from LISP
s> 10.90.3.254/32 0.0.0.0 0 32768 i - this are redistributed to BGP from LISP
Problem is, I have Edge switch connected to both of this borders, when lets say link from Edge to B1 is down, LISP route goes down and logically it should sent traffic through B2, but the problem is that BGP best path points to 0.0.0.0 and being blackholed, second path in BGP routing table which is peer IP (in this case 172.16.12.174) never used, this happens because "aggregate address summary only command" injectw 0.0.0.0 into BGP and choosing it as the best in BGP routing table, and beside that there is redistributed from LISP 3 routes with metric 10
I'm trying to understand if its kind of LISP/BGP routing loop, its DNA network and all this aggregates are pushed by DNA, I wonder if we need to add some additional configuration beside automated by DNA to avoid this?
Let me know if you need additional details
06-12-2024 02:21 AM
BORDER_NODE1#show lisp site
Register Registered ID
site_uci never no -- 4097 10.90.0.0/22
02:53:18 yes# 10.112.2.1:29420 4097 10.90.0.20/32
02:53:17 yes# 10.112.2.8:19379 4097 10.90.0.21/32
02:54:01 yes# 10.112.2.21:32729 4097 10.90.0.23/32
BORDER_NODE2#show lisp site
site_uci never no -- 4097 10.90.0.0/22
14:49:44 yes# 10.112.2.1:46616 4097 10.90.0.20/32
14:49:49 yes# 10.112.2.8:21701 4097 10.90.0.21/32
02:54:23 yes# 10.112.2.21:18349 4097 10.90.0.23/32
Edge#show lisp site
LISP Site Registration Information
HeadOffice_Edge-2#
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide