enabled ibgp between 2 Mikrotik crashed 5.20

RouterOS Forwarding Protocols
1

Router1:
ISP1
ISP2
ISP3 (local internet exchange)

Router2:
ISP4
ISP5

I have established sesson between these two routers 1 and 2 so that Router 2 is able to learn the route from Router1 for ISP3 (local Internet change) but it crashed the Mikrotik where both units became unresponsive. To fix this problem I had to disable the ibgp session between these 2 routers.

our AS is 1234

Router1 iBGP config

name=“ibgp-office” instance=default remote-address=172.31.1.1 remote-as=1234>
tcp-md5-key=“” nexthop-choice=default multihop=no route-reflect=no
hold-time=3m ttl=default in-filter=“” out-filter=“” address-families=ip
default-originate=never remove-private-as=no as-override=no passive=no
use-bfd=no

Router 2 iBGP config

name=“ibgp-dc” instance=default remote-address=172.31.1.2 remote-as=1234
tcp-md5-key=“” nexthop-choice=default multihop=no route-reflect=no
hold-time=3m ttl=default in-filter=“” out-filter=“” address-families=ip
default-originate=never remove-private-as=no as-override=no passive=no
use-bfd=no

Anyone kindly to share some tips?

Thank you! :wink:

2

how many routes are exchanged ?
the channel used to Exchange routes is the same you use to access these routers ?
which routers do you use ?
how many ram the routers have ?

3

the routes from ISP3 is 8129

But I think routes from ISP1, ISP2, ISP4 and ISP5 would be exchanged on this link as well.

Each ISP we are receiving full routing table about 420K prefixes.

The channel which I am using to setup this iBGP is a dedicated interface.

Each router has 2GB Memory and each of them after BGP peering with their respective peers are 1.4GB free.

4

sorry, I ask the model of your mikrotik router.
do you use an RB1000 or an RB1100Ax2 ?
when this routers load a bgp full table, the cpu goes to 100% for a while.
do not use winbox during the initialization.
never open ip routes.

5

Hi Rodolfo,

We are using x86 Mikrotik with 8 Cores CPU.

The CPU Load is very little during the peering.

Is it a known bug that it would caused such problem?

6

no, with your hardware you must not have problems!
be shure to acetive multi-cpu=yes
send supout.rif to the support

7

Hi rodolfo,

Do you think if it is better for me to setup a filter in and out for the iBGP peer?

8

an in filter and out filter it is always advisable