Browsing Posts published in February, 2010

The previous topology was concerned with establishing a E-BGP neighborings with two directly connected networks . Now lets turn our focus to the ones which are not directly connected but yet needs to be E-BGP peers

The following topology will be used by me

R2 ->R1 — 172.16.1.0/24

R1->R4 — 172.16.2.0/24

R4 :

router bgp 1

nei 172.16.1.2 remote-as 2

R4

router bgp 2

nei 172.16.2.2 remote-as 1

when we turn on debugging and wait for something to happen. Actually first we need see if we have network layer reachability to routers then we can worry about EBGP peerings . Hence i set up a static route and enable

DEBUG IP BGP IPV4 UNICAST

For EBgp relationships

Now if we are left with other configuration option such as Ttl-security lets see how things get worse from one end

even though the state changes from IDLE / ACTIVE -> OPEN SENT it never comes to established

The other router will always be in open confirm mode

Lets verify that

R2(config-router)#do sh bgp nei | in state
BGP state = OpenConfirm
Connection state is ESTAB, I/O status: 1, unread input bytes: 0
R2(config-router)#
R2(config-router)#do sh bgp nei | in TTL
Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 2 —> TTL WOULD BE ’0′ (ZERO) WHEN IT REACHES THE ROUTER R4
R2(config-router)#
R2(config-router)#do sh run | sec bgp
router bgp 2
no synchronization
bgp log-neighbor-changes
neighbor 172.16.2.2 remote-as 1
neighbor 172.16.2.2 ebgp-multihop 2
no auto-summary
R2(config-router)#

Because the other router is expecting a incoming ip packet value TTL should be atleast 253  or higher . so the solution is to configure R2 such that it sends TTL OF 255 so that by the time packet travels 2 hops its TTL would be 253 .

or the other option is to set ttl-security option to Router 2 also . But we would rather miss the fun Right

Ok lets do it on R2

Yaa can you see the multihop working now in accordance with TTL-SECURITY . Its bed Time . Meet you Tomorrow with some other fun stuff

Regards

Rakesh

High Resolution Press Images:

[+] icon_smile.gif
[+] icon_smile.gif
[+] icon_smile.gif

E-BGP Neighbors

No comments

This is a simple lab which demonstrates the requirements of bgp external peerings

we have got two routers on 172.16.1.0/24 subnet

R1->172.16.1.1 ,r2->172.16.1.2

R1

Router bgp 1

neighbor 172.16.1.2 remote-as 2

R2

Router bgp 2

neighbor 172.16.1.1 remote-as 1

lets see the routers BGP process and some debug messages

—————————————————————————————–

when we configure peer with wrong AS-number you can see the below output happen
R1
router bgp 1
neighbor 172.16.1.2 remote-as 2
R2
router bgp 2
neighbor 172.16.1.1 remote-as 11-> this should be 1
More to come with E-bgp peering with EBGP-MULTIHOP And other ways of doing things
Regards
Rakesh

High Resolution Press Images:

[+] icon_smile.gif

Plan for this week

No comments

I have been working on core technologies and was busy . Its show time now and started with preparation again . Today and Tomorrow may be a well deserved BGP session and some of the ospf core Lab scenarios . Found one of the very interesting scenarios with ospf and would update you soon on that .

will update with bpg and some of the ospf points in the mean time . Happy Weekend guys / gals

Best Regards

Rakesh

High Resolution Press Images:

[+] icon_smile.gif