BGP disable-connected-check






  • All routers are running OSPF as IGP
  • iBGP is configured between R1 and R3
  • eBGP is configured between R1  and R2 and R3 and R2
eBGP between R1 and R2 should be configured using their loopback interfaces, one way to achieve this  is to configure eBGP multihop where TTL values of the BGP packets is increased.
Another way of doing it  is to use the  disable-connected-check   command under the BGP configuration, this will allow the two routers to become neighbours but only through direct connected links since the TTL is not touched 
let's check the configurations on R1 and R2 R1(config-router)#do sh run | sec router bgp
router bgp 100
 no synchronization
 bgp log-neighbor-changes
 neighbor 2.2.2.2 remote-as 200
 neighbor 2.2.2.2 disable-connected-check
 neighbor 2.2.2.2 update-source Loopback0
 neighbor 10.1.13.3 remote-as 100
 no auto-summary


R2(config-router)#do sh run | b router bgp
router bgp 200
 no synchronization
 bgp log-neighbor-changes
 neighbor 1.1.1.1 remote-as 100
 neighbor 1.1.1.1 disable-connected-check
 neighbor 1.1.1.1 update-source Loopback0
 no auto-summary
!
as we can see in the output of sh ip bgp summ that BGP has been established between the two neighbours

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
1.1.1.1         4   100      32      32        1    0    0 00:28:31        0

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4   200      32      32        1    0    0 00:28:51        0

let's check the TTL for 2.2.2.2 on R1

R1(config-if)#do sh ip bgp ne 2.2.2.2 | in TTL
Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1


now let's see what happens if we shut down the direct link between R1 and R2
BGP went down between R1 and R2
Although R1 still has the route to 2.2.2.2
R1(config-if)#do sh ip route 2.2.2.2
Routing entry for 2.2.2.2/32
  Known via "ospf 1", distance 110, metric 11, type intra area
  Last update from 10.1.12.2 on FastEthernet0/0, 00:01:33 ago
  Routing Descriptor Blocks:
  * 10.1.12.2, from 2.2.2.2, 00:01:33 ago, via FastEthernet0/0
      Route metric is 11, traffic share count is 1



 Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4   200      33      37        0    0    0 00:02:21 Active 

Now let's check if we changed the configuration to eBGP multi hop while interf f0/0 is shut down on R1
on R1 and R2 under BGP configuration we use neighbor x.x.x.x ebgp-multihop 3 

Neighbor        V    AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
2.2.2.2         4   200      45      49        1    0    0 00:00:18        0


and the TTL is also changed to 3

R1(config-if)#do sh ip bgp ne 2.2.2.2 | in TTL
Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 3










Comments

Post a Comment

Popular posts from this blog

IPv6 EIGRP

Image
In this post we will try to configure IPv6 EIGRP see the different options for the protocol and how these options are almost identical to the IPv4 version of EIGRP configuration R1 ipv6 unicast-routing interface lo0 ipv6 address 2001:1:1::1/64 interface FastEthernet0/0   ipv6 address FE80::1 link-local   ipv6 address FC00:1:12::1/64 ! interface FastEthernet0/1   ipv6 address FE80::1 link-local   ipv6 address FC00:1:13::1/64 !          R2 ipv6 unicast-routing interface lo0 ipv6 address 2001:2:2::2/64 interface FastEthernet0/0   ipv6 address FE80::2 link-local   ipv6 address FC00:1:12::2/64 ! interface FastEthernet0/1   ipv6 address FE80::2 link-local   ipv6 address FC00:1:23::2/64 R3 ipv6 unicast-routing interface lo0 ipv6 address 2001:3:3::3/64 interface lo1 ipv6 address 2001:3:4::3/64 interface lo2 ipv6 address 2001:3:5::3/64 interface FastEthernet0/0   ipv6 address FE80::3 link-local   ipv6 address FC00:1:13::3/64 ! interface FastEthernet0/1   ipv6 address FE80
Read more

BPDU Filter vs BPDU Guard

        Today we will try to explore the difference between these 2 options, BPDU guard and BPDU filter We know that BPDU are used to communicate between switches in L2 networks  to ensure loop free topology. BPDU Guard is used to protect our access (or trunks incase of servers) ports from receiving undesired BPDU packets, this feature is helpful in enforcing your network boundary in access layer BPDU Guard can be enabled on global configuration as well as under the interface configuration BPDU Filter on the other hand is used to filter BPDU packets outbound when configured  in global configuration (after sending 11 BPDU out ) and will filter BPDU inbound/outbound when configured under the interface level To better understand these two features, let’s use this simple topology R1 is connected to SW1 through F0/0 to have R1 send and receive BPDU we will simple configure bridging group 1 on the router and we will join the bridge group when desired to test our configuration BPDU
Read more

BGP Weight Attribute

Image
Before we start the lab let's see the BGP path selection process If the path specifies a next hop that is inaccessible, drop the update. •Prefer the path with the highest weight. •If the weights are the same, prefer the path with the largest local preference. •If the local preferences are the same, prefer the path that was originated by BGP running on this router. •If no route was originated, prefer the route that has the shortest AS_path. •If all paths have the same AS_path length, prefer the path with the lowest origin code (where IGP is lower than EGP, and EGP is lower than incomplete). •If the origin codes are the same, prefer the path with the lowest MED attribute. •If the paths have the same MED, prefer the external path over the internal path. •If the paths are still the same, prefer the path through the closest IGP neighbor. •Prefer the path with the lowest IP address, as specified by the BGP router ID. I read this on CCIE Pursuit blog We Love Oranges As O
Read more