Tuesday, June 22, 2021

Only accept/announce RFC 1918 IPs on BGP peering? Routing policy?

Hi, We are using Juniper as PE router and Cisco as CE router. The issue is that I'm able to see the routes on PE(Juniper) and from "advertising-protocol bgp" output able to see that prefixes (ex 222.1.1.x) is being advertised but when I check on CE router.. there is noting related to 222.1.1.x and seeing routes related only to RFC 1918 (10.x.x.x, 172.x.x.x, 192.168.x.x).

We are not using any filtering on CE and as far as I can see on PE there is no much filtering applied on the peering.

Is there any way that global policy is kicks in somewhere(PE or CE)? and does the output from "advertising-protocol bgp" is actually being prefixes advertised to it peer(CE)?

a. CE CE#sh ip route 10.254.78.96 <- Working Routing entry for 10.254.78.96/27 Known via "bgp 100", distance 20, metric 0 * 1.1.1.1, from 1.1.1.1, 7w0d ago Route metric is 0, traffic share count is 1 AS Hops 3 Route tag 65000 MPLS label: none CE#sh ip route 222.1.1.0 <- ISSUE - NOT VISBLE % Network not in table CE#sh ip bgp 222.1.1.0 % Network not in table CE#sh ip bgp | i 222.1. router bgp 100 neighbor 1.1.1.1 remote-as 500 neighbor 1.1.1.1 password xxxxxx b. PE (JUNIPER) PE> show route advertising-protocol bgp 1.1.1.2 | match 331. * 10.254.78.96/27 Self 802 331 ? * 222.1.1.0/28 Self 802 331 ? set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 type external set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 export red:BGP-STATIC set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 multipath set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 minimum-hold-time 8 set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 passive set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 import deny-as-500 set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 family inet unicast prefix-limit maximum 5000 set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 family inet unicast prefix-limit teardown 90 set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 authentication-key xxxxxx set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 export red:BGP-STATIC set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 peer-as 100 set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 disable-4byte-as set routing-instances vrf-CUST protocols bgp group vrf-CUST_IPv4_1 neighbor 1.1.1.2 as-override 


No comments:

Post a Comment