BGP route filter
Hi,
i am trying to filter the inbound routes from ISP , but ended up blocking all routes from ISP.
please can anyone advise..
the topology is like below
ip prefix-list PL_IN seq 5 10.13.1.26/29
router bgp 65000
neighbor 172.16.16.1 prefix-list seq 5 permit PL_IN in
i want the only route from PE router to be displayed in CE routing table is 10.13.1.26
and the same way how to restrict the outbound routes , the only route to be sent is 10.5.11.76 to PE router.
Hi,
configuration looks ok. Only thing to be checked that you have prefix with mask /29 only. Please share output of "show ip bgp 10.13.1.26/29 from 172.16.16.1 and 172.16.16.2
Regards,
Akash
Similar Messages
-
I have BGP peering with carrier. I would like to only accept routes from the carrier that I am interested in.
My Router : 128.100.1.1
router bgp 64514
no synchronization
bgp log-neighbor-changes
neighbor 10.10.10.2 remote-as 64514
neighbor 10.10.10.2 next-hop-self
neighbor 128.100.1.39 remote-as 64517
neighbor 128.100.1.39 default-originate
neighbor 128.100.1.39 prefix-list DENYROUTE in
neighbor 128.100.1.39 route-map Set_LP in
no auto-summary
ip prefix-list DENYROUTE seq 5 deny 128.100.8.0/24
ip prefix-list DENYROUTE seq 99 permit 0.0.0.0/0 le 32
OSPARK#sh ip route
128.100.0.0/16 is variably subnetted, 6 subnets, 2 masks
C 128.100.160.26/32 is directly connected, Loopback160
C 128.100.1.0/24 is directly connected, Vlan10
B 128.100.8.0/24 [20/0] via 128.100.1.39, 00:17:57
B 128.100.9.0/24 [20/0] via 128.100.1.39, 00:17:57
B 128.100.10.0/24 [20/0] via 128.100.1.39, 00:17:57
B 128.100.17.0/24 [200/0] via 10.10.10.2, 00:26:17
10.0.0.0/30 is subnetted, 3 subnets
C 10.10.10.0 is directly connected, Vlan100
B 10.37.184.196 [20/0] via 128.100.1.39, 00:17:59
B 10.37.184.200 [20/0] via 128.100.1.39, 00:17:59
S* 0.0.0.0/0 [1/0] via 128.100.1.30
OSPARK#
I am learning routes of 128.100.8.0 and 128.100.9.0 and 128.100.10.0. I would like to try and block 128.100.8.0 from coming to my router with Prefix List but doesn't work.
Carrier Router: 128.100.1.39
router bgp 64517
no synchronization
bgp log-neighbor-changes
neighbor 10.37.184.201 remote-as 65530
neighbor 128.100.1.1 remote-as 64514
no auto-summaryJust to elaborate on Henrik's excellent suggestion, run:
clear ip bgp 128.100.1.39 soft -
MPLS BGP routes push to DMVPN spokes
I have an MPLS with BGP. I also have sites that are not connected directly to the MPLS, but have a s2s VPN to hub sites that are connected to the MPLS and that way they access the MPLS resources. I need to communicate the route changes to the MPLS when the DMVPN fails-over to another hub.
Currently this is my config:
Datacenter (MPLS only)
interface GigabitEthernet0/1
description MPLS
ip address 192.168.0.34 255.255.255.252
interface Vlan2
ip address 192.168.96.2 255.255.255.0
router bgp 65511
bgp log-neighbor-changes
network 192.168.96.0
neighbor 192.168.0.33 remote-as 65510
Hub site 1 (MPLS + internet)
interface Tunnel200
ip address 10.99.99.1 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication auth
ip nhrp map multicast dynamic
ip nhrp network-id 12345
ip nhrp holdtime 600
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 200
tunnel protection ipsec profile dmvpn
interface GigabitEthernet0/1
description MPLS
ip address 192.168.1.2 255.255.255.0 secondary
ip address 192.168.0.2 255.255.255.252
router bgp 65001
bgp log-neighbor-changes
network 192.168.1.0
network 192.168.21.0
!10.99 clients are DMVPN spokes
neighbor 10.99.99.3 remote-as 99010
neighbor 10.99.99.3 route-reflector-client
neighbor 10.99.99.21 remote-as 99001
neighbor 10.99.99.21 route-reflector-client
!as 65000 is the MPLS PE
neighbor 192.168.0.1 remote-as 65000
Hub Site 2, has the same configuration, except for local ip address and router BGP ID.
Spoke site:
interface Tunnel200
ip address 10.99.99.3 255.255.255.0
no ip redirects
ip mtu 1400
ip nhrp authentication auth
ip nhrp map 10.99.99.1 PUBLIC_IP_HUB_1
ip nhrp map 10.99.99.16 PUBLIC_IP_HUB_2
ip nhrp network-id 12345
ip nhrp holdtime 600
ip nhrp nhs 10.99.99.1 priority 1
ip nhrp nhs 10.99.99.16 priority 5
ip nhrp nhs fallback 60
tunnel source GigabitEthernet0/0
tunnel mode gre multipoint
tunnel key 200
tunnel protection ipsec profile dmvpn
interface GigabitEthernet0/1
description Internal
ip address 192.168.3.1 255.255.255.192
router bgp 99010
bgp log-neighbor-changes
network 192.168.3.0
neighbor 10.99.99.1 remote-as 65001
neighbor 10.99.99.16 remote-as 65013
On this spoke site
#sh ip route
B 192.168.1.0/24 [20/0] via 10.99.99.1, 00:47:01
which is the HUB network, but the rest of the MPLS routes are not "learned".
What am I missing?
Thanks!Hi Jon, I've ommited the configuration of the MPLS provider routers in between. The DC is connected to a router that has the AS 65510.
DC:CPE---PE:{MPLS}PE---CPE:HUB---{internet}---Spoke
The DC is ok getting the network information via BGP:
#sh ip route
B 192.168.3.0/24 [20/0] via 192.168.0.33, 3d05h
B 192.168.21.0/24 [20/0] via 192.168.0.33, 3d05h
#sh ip bgp 192.168.21.0
BGP routing table entry for 192.168.21.0/24, version 559
Paths: (1 available, best #1, table default)
Not advertised to any peer
Refresh Epoch 1
65510 3549 6140 3549 65000
192.168.0.33 from 192.168.0.33 (###.###.###.###)
Origin IGP, localpref 100, valid, external, best
#sh ip route 192.168.21.0
Routing entry for 192.168.21.0/24
Known via "bgp 65511", distance 20, metric 0
Tag 65510, type external
Last update from 192.168.0.33 3d05h ago
Routing Descriptor Blocks:
* 192.168.0.33, from 192.168.0.33, 3d05h ago
Route metric is 0, traffic share count is 1
AS Hops 5
Route tag 65510
MPLS label: none
Spoke:
#sh ip bgp
BGP table version is 494, local router ID is 192.168.21.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,
x best-external, a additional-path, c RIB-compressed,
Origin codes: i - IGP, e - EGP, ? - incomplete
RPKI validation codes: V valid, I invalid, N Not found
Network Next Hop Metric LocPrf Weight Path
*> 10.0.129.32/27 10.99.99.16 0 65013 65012 3549 ?
*> 192.168.96.0 10.99.99.16 0 65013 65012 3549 6745 65510 ?
#sh ip route 192.168.96.0
Routing entry for 192.168.96.0/24
Known via "bgp 99001", distance 20, metric 0
Tag 65013, type external
Last update from 10.99.99.16 00:02:11 ago
Routing Descriptor Blocks:
* 10.99.99.16, from 10.99.99.16, 00:02:11 ago
Route metric is 0, traffic share count is 1
AS Hops 5
Route tag 65013
MPLS label: none
#sh ip bgp 192.168.96.0
BGP routing table entry for 192.168.96.0/24, version 465
Paths: (1 available, best #1, table default)
Not advertised to any peer
Refresh Epoch 2
65013 65012 3549 6745 65510
10.99.99.16 from 10.99.99.16 (10.2.16.1)
Origin incomplete, localpref 100, valid, external, best
The route is not being updated to the rest of the routers, and the 192.168.21.0 network is still announced via the old route.
(from spoke)
ping 192.168.96.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.96.2, timeout is 2 seconds:
Success rate is 0 percent (0/5)
From DC
#traceroute 192.168.21.1
Type escape sequence to abort.
Tracing the route to 192.168.21.1
VRF info: (vrf in name/id, vrf out name/id)
1 192.168.0.33 [AS 65510] 0 msec 0 msec 0 msec
2 172.50.1.33 [AS 65510] 56 msec 36 msec 36 msec
3 10.80.1.1 [AS 3549] 44 msec 44 msec 44 msec
4 10.80.1.2 [AS 3549] 172 msec 172 msec 168 msec
5 172.50.1.1 [AS 3549] 168 msec 168 msec 172 msec
6 172.50.1.2 [AS 3549] 180 msec 180 msec 176 msec
7 192.168.0.2 [AS 65000] 172 msec 172 msec 168 msec <- old route, should be 192.168.0.9
8 192.168.0.2 [AS 65000] !H * !H -
EIGRP vs BGP route path selection scenario
I am looking for a routing solution to the following scenario. It is a fairly simple design.
I have two WAN connections between sites A and B. One is a 20 Meg Metro Ethernet Circuit running EIGRP. The other is a 10 Meg MPLS running BGP. What do I need to do in my configuration to make sure that the 20 Meg connection is the chosen path based off the fact that it has better speed and bandwidth? It appears to me that the MPLS is the preferred path even though it is slower.
See attached Diagram:
Site A Config
interface GigabitEthernet1/0/12
description PADC COX P2P 20 Meg
no switchport
bandwidth 20480
ip address 172.20.1.1 255.255.255.252
interface GigabitEthernet2/0/2
description LEVEL 3 MPLS
no switchport
bandwidth 10240
ip address 172.22.0.2 255.255.255.252
router eigrp 1
network 10.0.1.0 0.0.0.255
network 172.20.1.0 0.0.0.3
network 192.168.76.8 0.0.0.3
redistribute bgp 65003 metric 100 1 255 1 1500 route-map MPLS_NETWORKS
redistribute static route-map DEFAULT_ROUTE
router bgp 65003
bgp log-neighbor-changes
redistribute static
redistribute eigrp 1
neighbor 172.22.0.1 remote-as 1
default-information originate
Site B Config
interface GigabitEthernet0/1
description COX Communications 10 Meg to Venyu
bandwidth 20480
ip address 172.20.1.2 255.255.255.252
duplex auto
speed auto
service-policy output VOIP
interface GigabitEthernet0/2
description Level 3 MPLS
bandwidth 10240
ip address 172.22.1.2 255.255.255.252
duplex full
speed 100
router eigrp 1
network 10.3.1.0 0.0.0.31
network 10.52.1.0 0.0.0.255
network 10.76.6.0 0.0.0.255
network 172.20.1.0 0.0.0.3
network 192.168.63.64 0.0.0.63
network 192.168.76.249 0.0.0.0
passive-interface default
no passive-interface GigabitEthernet0/0
no passive-interface GigabitEthernet0/1
router bgp 65003
bgp log-neighbor-changes
network 10.3.1.0 mask 255.255.255.224
network 10.52.1.0 mask 255.255.255.0
network 10.76.6.0 mask 255.255.255.0
network 192.168.76.249 mask 255.255.255.255
neighbor 172.22.1.1 remote-as 1If each router is receiving advertisements for the same networks/subnet masks from both BGP and EIGRP it will always choose the BGP routes because they have a lower AD ie. 20 vs EIGRP 90.
Doesn't matter what the bandwidth is.
If you want to prefer the 20Mbps links then there are a number of options -
1) if you can summarise each sites subnets then advertise the summary via BGP and the more specific via EIGRP. More specific will be chosen even before AD is taken into account.
2) change the AD of either BGP or EIGRP so EIGRP ends up with the lower AD
3) run BGP on both links although you would still need to manipulate the attributes to make sure the link you want is used.
Jon -
Query on BGP route distribution
Hello Everyone
In the below scenario (GNS3), IBGP peering enabled between R1-R2, R1-R3, R2-R3 and EBGP peering enabled between R2-R4,R3-R5,R4-R6,R5-R7. OSPF enabled as IGP. Scenario attached for reference.
The problem I've observed in R1 is not getting entire BGP routing table for destinations 30.x.x.x/40.x.x.x.
I'm able to see only best routes in R1 BGP routing table, but alternate valid routes are not visible in its topology table.
R1#sh ip bgp
BGP table version is 81, local router ID is 100.100.2.1
*>i30.30.1.0/24 10.10.1.2 0 100 0 200 300 ?
*>i30.30.2.0/24 10.10.1.2 0 100 0 200 300 ?
*>i40.40.1.0/24 10.10.2.2 0 100 0 200 400 i
*>i40.40.2.0/24 10.10.2.2 0 100 0 200 400 i
*> 100.100.1.0/24 0.0.0.0 0 32768 i
*> 100.100.2.0/24 0.0.0.0 0 32768 i
More confusing part to me is when I disable IBGP peering between R2-R3 or shutdown interface between R2-R3 or else if I disable ospf in R1,R2 & R3 routers , I'm able to see both best route and alternate valid route in BGP topology table.
R1#sh ip bgpHi Milin & Renan,
Thanks for your replies. To narrow down the problem, I’ve shut down the 40.40.x.x network.
Now between R2-R3, R3 is not advertising 30.30.X.X network to R2, but whereas R2 is advertising 30.30.X.X network to R3. Why R3 is not advertising 30.30.X.X (route via 200 400 300) to R2.
R2#sh ip bgp ( No alternate route)
Network Next Hop Metric LocPrf Weight Path
*> 30.30.1.0/24 10.10.4.2 0 200 300 ?
*> 30.30.2.0/24 10.10.4.2 0 200 300 ?
*>i100.100.1.0/24 10.10.1.1 0 100 0 i
*>i100.100.2.0/24 10.10.1.1 0 100 0 i
R2#sh ip bgp summary
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.10.1.1 4 100 96 98 5 0 0 01:05:50 2
10.10.3.2 4 100 98 100 5 0 0 01:05:54 0
10.10.4.2 4 200 100 98 5 0 0 01:05:39 2
R3#sh ip bgp ( only in R3 we can see both best route & alternate route)
Network Next Hop Metric LocPrf Weight Path
*>i30.30.1.0/24 10.10.3.1 0 100 0 200 300 ?
* 10.10.5.2 0 200 400 300 ?
*>i30.30.2.0/24 10.10.3.1 0 100 0 200 300 ?
* 10.10.5.2 0 200 400 300 ?
*>i100.100.1.0/24 10.10.2.1 0 100 0 i
*>i100.100.2.0/24 10.10.2.1 0 100 0 i
R3#sh ip bgp summary
Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd
10.10.2.1 4 100 54 57 19 0 0 00:50:17 2
10.10.3.1 4 100 62 60 19 0 0 00:27:22 2
10.10.5.2 4 200 58 58 19 0 0 00:50:08 2 -
Hello,
i have this bgp topology all router running bgp and no igp is running. Now, the problem is R2 and R3 are route reflector, R1 and R4 are Rclient.
R3 has learn route from R4 (4.4.4.4) from its R client and it advertise to R2 but R2 not advertise (4.4.4.4) route to its client (R1).
R1#sh ip bgp
BGP table version is 5, local router ID is 192.168.12.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*> 1.1.1.1/32 0.0.0.0 0 32768 i
*>i2.2.2.2/32 192.168.12.2 0 100 0 i
* i3.3.3.3/32 192.168.23.3 0 100 0 i
R2#sh ip bgp
BGP table version is 8, local router ID is 192.168.12.2
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
*>i1.1.1.1/32 192.168.12.1 0 100 0 i
*> 2.2.2.2/32 0.0.0.0 0 32768 i
*>i3.3.3.3/32 192.168.23.3 0 100 0 i
* i4.4.4.4/32 192.168.34.4 0 100 0 iR3#sh ip bgp
BGP table version is 8, local router ID is 192.168.23.3
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,
r RIB-failure, S Stale
Origin codes: i - IGP, e - EGP, ? - incomplete
Network Next Hop Metric LocPrf Weight Path
* i1.1.1.1/32 192.168.12.1 0 100 0 i
*>i2.2.2.2/32 192.168.23.2 0 100 0 i
*> 3.3.3.3/32 0.0.0.0 0 32768 i
*>i4.4.4.4/32 192.168.34.4 0 100 0
R3#sh run | se router bgp
router bgp 1
no synchronization
bgp log-neighbor-changes
network 3.3.3.3 mask 255.255.255.255
neighbor 192.168.23.2 remote-as 1
neighbor 192.168.23.2 next-hop-self
neighbor 192.168.34.4 remote-as 1
neighbor 192.168.34.4 route-reflector-client
no auto-summary -
Hello Guys,
My scenario is:
2 Sites interconnected by 2 MPLS Links and BGP between the routers.
I need some help to force some traffic to be routed using one Link based on Protocol or TCP Port.
But if the link goes down, I need the traffic to be send using another link.
I want to do a PBR using track that validates a specific BGP Route or BGP Neighbor.
Can someone tell me some tips for this case?
Best Regards.
Heleno FagundesHi,
For your two concerns.
**2 Sites interconnected by 2 MPLS Links and BGP between the routers
Do you have some sort of network diagram ????
**I want to do a PBR using track that validates a specific BGP Route or BGP Neighbor.
We can always apply a track and an IP sla monitoring an IP address which the router is receiving from its BGP peer which you wish to monitor.
I am sure if you provide me sample diagram/config i'll be able to give some more descriptive answer.
Regards,
HK -
I am confused about which routes will a bgp speaker advertise to its bgp neighbors?
Will it advertise the bgp routes in routing table OR will it advertise the best routes from the bgp table (but not necessarily in routing table)?Thanks!!
I thought so, but in Troubleshooting IP Routing Protocols book by Cisco press, it is stated that bgp router will advertise its routes from routing table, so wanted to confirm that that was indeed wrong.
On page 668, this is what is written:
One rule that BGP follows when advertising prefixes to other neighbors is that the prefix being advertised must
exist in the routing table of the advertising router. -
Monitoring a BGP route and AS-PATH.
Hello.
I need to receive a SNMP trap when a BGP route, received with a specific AS-PATH, disappears from routing table.
Any ideas?
Thanks.
AndreaYou can use EEM for this. Check out the cisco beyond web site for sample scripts that may help you do this.
A company that I used to work for, www.magnus.net had a mature EEM solution for doing this for large network environments. They took a standalone router and using EEM turned it into a route monitor. It would send out notifications when BGP routes of defined attributes like AS-Path diasappeared from routing tables. It was driven by an excel spreadsheet as inputs. It was written by a super CCIE engineer. -
Hi,
I would like to change the bgp router id on my router that dialogue with peers in other AS.
I will use the loopback interface 0 and I have a doubt about the ip address that I can use.
I think that can be a private address in a public addresses domain. Is it correct?
So, I think that it's better I'd implement the ebgp multihop command with the remote AS peers. Right?
Before I do these changes do I have to warn the other peers to permit to change their configuration?Hello,
Changing your router-id will be effective after you reset your connections.
You can use a RFC 1918 address to suit your needs. Be careful not to leak the address to the Internet.
If you use the Loopback interface as a update-source you need to use the ebgp-multihop command for reachability. If you are useing it for a router-id only you should not bother to change the TTL in BGP packets.
It is recommended that you inform your peers about your plans.
HTH
Leon
* Please rate posts. -
What do we need to do if BGP Router contribute high process in CPU?
CPU utilization for five seconds: 97%/43%; one minute: 99%; five minutes: 92%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
44 36270732 35464661 1022 25.03% 15.21% 14.43% 0 BGP Router
325 7703860203228294256 0 10.47% 5.58% 5.24% 0 IP Input
455 7596596 28244228 268 5.59% 1.60% 0.82% 0 BGP I/O
543 13576608 8569950 1584 3.83% 18.94% 9.57% 0 BGP Task
9 152474380 15201602 10030 2.07% 0.27% 0.57% 0 Check heaps
376 16372652 7777145 2105 1.83% 13.93% 13.76% 0 IP RIB Update
358 56785192 14452691 3929 0.95% 0.44% 0.52% 0 CEF: IPv4 proces
23 55656604 116191071 479 0.71% 0.51% 0.50% 0 ARP Input
348 5736736 7812055 734 0.63% 4.19% 5.03% 0 XDR mcast
546 36531108 132425650 275 0.63% 0.37% 0.28% 0 Port manager per
35 56337684 306101724 184 0.23% 0.42% 0.30% 0 IPC Seat Manager
330 287962916 871459868 330 0.23% 0.39% 1.61% 0 SNMP ENGINE
286 7682841067821917 0 0.15% 0.07% 0.07% 0 Ethernet Msec Ti
626 354112 825565 428 0.15% 0.11% 0.09% 0 IPv6 Input
3 754316 523105917 1 0.15% 0.10% 0.09% 0 HSRP Common
385 2182508 14151135 154 0.15% 0.10% 0.14% 0 L3 Manager
317 44655884 658073408 67 0.07% 0.04% 0.21% 0 PDU DISPATCHER
395 4363480 4661440 936 0.07% 0.04% 0.05% 0 HIDDEN VLAN Proc
323 1161648 134374319 8 0.07% 0.04% 0.05% 0 VRRS Main thread
56 2269676 9230664 245 0.07% 0.08% 0.07% 0 Per-Second Jobs
240 1449416 1870109 775 0.07% 0.04% 0.05% 0 Compute load avg
243 1488814081309230003 113 0.07% 0.13% 0.76% 0 IP SNMP
CPU utilization for five seconds: 97%/43%; one minute: 99%; five minutes: 92%
PID Runtime(ms) Invoked uSecs 5Sec 1Min 5Min TTY Process
44 36270732 35464661 1022 25.03% 15.21% 14.43% 0 BGP Router
325 7703860203228294256 0 10.47% 5.58% 5.24% 0 IP Input
455 7596596 28244228 268 5.59% 1.60% 0.82% 0 BGP I/O
543 13576608 8569950 1584 3.83% 18.94% 9.57% 0 BGP Task
9 152474380 15201602 10030 2.07% 0.27% 0.57% 0 Check heaps
376 16372652 7777145 2105 1.83% 13.93% 13.76% 0 IP RIB Update
358 56785192 14452691 3929 0.95% 0.44% 0.52% 0 CEF: IPv4 proces
23 55656604 116191071 479 0.71% 0.51% 0.50% 0 ARP Input
348 5736736 7812055 734 0.63% 4.19% 5.03% 0 XDR mcast
546 36531108 132425650 275 0.63% 0.37% 0.28% 0 Port manager per
35 56337684 306101724 184 0.23% 0.42% 0.30% 0 IPC Seat Manager
330 287962916 871459868 330 0.23% 0.39% 1.61% 0 SNMP ENGINE
286 7682841067821917 0 0.15% 0.07% 0.07% 0 Ethernet Msec Ti
626 354112 825565 428 0.15% 0.11% 0.09% 0 IPv6 Input
3 754316 523105917 1 0.15% 0.10% 0.09% 0 HSRP Common
385 2182508 14151135 154 0.15% 0.10% 0.14% 0 L3 Manager
317 44655884 658073408 67 0.07% 0.04% 0.21% 0 PDU DISPATCHER
395 4363480 4661440 936 0.07% 0.04% 0.05% 0 HIDDEN VLAN Proc
323 1161648 134374319 8 0.07% 0.04% 0.05% 0 VRRS Main thread
56 2269676 9230664 245 0.07% 0.08% 0.07% 0 Per-Second Jobs
240 1449416 1870109 775 0.07% 0.04% 0.05% 0 Compute load avg
243 1488814081309230003 113 0.07% 0.13% 0.76% 0 IP SNMPHi,
BGP Router process is in charge to determine the best path and processes any route "churn". It also sends and receives routes, establishes peers, and interacts with the routing information base (RIB).
(http://www.cisco.com/c/en/us/support/docs/ip/border-gateway-protocol-bgp/107615-highcpu-bgp.html)
So I suggest to check what make this process working hard. Depending on that you can choose what to do: bgp dampening (if you have many changes in advertisement received form a neighbor), tuning timer (if neighbor is flapping), using peer-group / update-groups to reduce the amount of job your BGP process has to do to process updates etc...
Have a look here: https://supportforums.cisco.com/discussion/11604471/high-cpu-usage-bgp-router-process
Bye,
enrico
PS please rate if useful -
Troubleshooting with IOS BGP and IOS XR BGP - routing table Empty
Hi
actually we tried to make a neigborhood between ASR9000 and Cisco 7600, we have the neigborhood active but on routing tables from ASR only have the networks locals or connected doesn´t learn anything from BGP 7600
the diagram is this:
When try to know the routes on ASR9000 from Cisco 7609 happen the follow
the neighbor is UP from Cisco 7600 and ASR 9000 but the routing table is empty.
the config on cisco 7600 is:
router bgp 2006
neighbor 172.16.14.6 remote-as 64512
address-family ipv4
neighbor 172.16.14.6 activate
the config on cisco ASR9000 is:
router bgp 64512
bgp router-id 172.16.161.1
address-family ipv4 unicast
neighbor 172.16.14.5
remote-as 2006
address-family ipv4 unicast
Help us
Best RegardsAnother important one is the fact that in XR you need to have RPL policies (even if they only have a "pass-all" functionality) to accept inbound/outbound routes in eBGP.
Check the article on the asr9000 unequal cost multipath that has some sample BGP outputs and show command verifications that may help also.
If not the case, get us the XR config from the A9K side.
Also what does the bgp table on teh IOS side look like? as Richard suggests, there doesnt seem to be anything injected by the 7600 itself.
regards
xander
Xander Thuijs
Principal Engineer CCIE#6775, ASR9000 -
Dual homed bgp route perference help
Good Morning, sir
I have a question regarding bgp route preference.
We have multi-homed BGP on remote site.
Let's call this site , site_a has verizon and at&t MPLS connection using bgp.
Currently, at&t route is preferred using as path prepend method.
We have addition AS number prepended on link to Verizon to prefer at&t route.
At this time, verizon is idle and not being used.
We would like to utilize this network to pass backup traffic.
We have source and destination address that we would like to pass through Verizon (out backup) link.
Any idea how I can do this?
I created the source/destination with ACL and created route-map matching that ACL and tweaked the local preference.
and since only major route is listed under 'show ip bgp' and not the specific route which I would like to influence,
I didn't see the tweaked route on routing table.
Any idea, anyone?
ThanksGetting the specific route into the routing depends on what is there ie. -
if there is already a route with same prefix and subnet mask in your IP routing table then you are fine.
If there isn't and your routing table does not have even more specific routes covering the whole subnet you want to advertise then you could use a static route either pointing to the next hop IP or the interface on the router used to get to that subnet.
Then you can use a "network ..." statement under your BGP configuration to advertise it and use a route map to only advertise it down the backup link.
Jon -
I need help on router filter setting. I am using router model WRT160Nv3. I have a very specific set of filtering requirements (see below) to be implemented. I implemented all of them except the first one. It is not clear to me how I could implement that. I am including all the requirements because I think I run out of filtering policy (the router allows only 10 policies)
Filtering requirements:
1. Allow all machines access to internet from 3:00 to 4:00pm, and from 7:00 to 12:00 midnight (each policy can have only one time range)
2. Block 6 different sites 24 x 7 (each policy can block up to 4 sites)
3. Block 30 different keywords (each policy can block up to 4 keywords)
Couple questions:
1. What is the "combining" logic on multiple policies? Are they AND together or OR together? Do ALLOW and DENY use the same or different logic?
2. Each policy allows only one time range. Does it mean that I have to split requirement 1 into 2 policies, one for each range? If I use two policies,
it seems the "combining" logic may be difficult?
Thank you for your help in advance,
AKMario,
I resolved my problem.
Make sure your router is also WRT160Nv3. My solution applies only to that model.
There were couple things that I did:
1. Reduced the number of keywords to be filtered so that they used up less policies.
2. All policies have the same logics:
If the conditions meet, it will apply the actions. The conditions are: time range, site names, keywords, etc.
The actions are allow or deny corresponding to the condition.
For example, if one of the policy said site www.xyz.com would be blocked. If the site occurred, that policy would
fire and block the site. That means the logic is OR among the policies.
3. You can use up all the conditions in the same policy. All the conditions are independent of each other.
For example, each keyword is blocked independent of other keywords, regardless of the time range.
4. I set up one policy with time range = 24 hours for allow.
Then set up another policy with time range = 4:00pm to 7:00pm for deny. That covered my time range requirements.
5. Then I set up other policies to cover sites and keywords. Since they were all independent to each other,
as long as the condition occurred to any one of the policies, the policy would fire and perform the action.
I hope that would answer your question.
Andrew K -
How to establish BGP Neighbourship without receiving BGP routes ?
Hi All,
I would like to establish BGP Neighbourship between my internet router and ISP router.
However I would not like my internet router to receive millions of bgp routes from the ISP router but my inside users should access internet via my internet router.
Kindly suggest how to do it.
Regards,
Mitesh Manwatkar.Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
Also depending on you setup with your ISP, you might not need BGP at all. Sometimes the ISP will advertize your public IP space (i.e. you don't need to), and if they do, all you need is a default route out.
PS:
Also BTW, often for basic ISP connectivity, even when BGP peering with your ISP, the ISP will not send you any routes but a default (because with a single link, there's no need for them).
Maybe you are looking for
-
How To Handle The Multiple Groups in OBIEE
Hello, How To handle in OBIEE if the user is mapped to 2 groups. We are using External Table Authtication for authenticating
-
i have the iphone 3gs and ive dropped it a few times. when i press the home and lock button, it will not turn on, but when i plug it in, it says in big font IOS 6 and when i slide it open it says connect to itunes or emergency call. it wont turn on w
-
IReceivables Payment Method Query
Hi All, We are on R12.1.2 and looking to use iRec. I can see 2 payment methods of Bank Transfer and Credit Card in the setups. What if the Customer wants to pay by cheque ? how do we record this ? Thanks Shanky
-
BAPI for meter reading order (MRO) Reversal
Hi Experts, Please let me know if there is any FM or BAPI for meter reading order reversal, Similar to EL37 Regards Bikas
-
I am running Fedora 8 (kernel 2.6.23.9) with Adobe Reader 8.1.1 on a Core 2 Duo with 2 gigs of ram. When I use the Firefox browser (2.0.0.10) to read a PDF document, a process named acroread is started. I assume this is done by the Adobe Reader Firef