Community discussions

MikroTik App
 
FurSilver
just joined
Topic Author
Posts: 5
Joined: Thu Apr 25, 2013 12:01 am

Config Help

Wed May 01, 2013 10:59 pm

I am having some issues with my config, and was looking for some help with the config for my CCR1036-12G-4S.

A few notes
ISP 1 = Current receiving Full Routes - 450646 prefixes.
ISP 2 = I want to receive Full Routes, and load balance outbound/inbound traffic.
ISP 3 = IX = When receiving Full Routes from ISP1, IPS3 drops my connection. (I have a feeling i am broadcasting all routes to them).

My core switches are Cisco 3560.
I have a /21 and a /24.

My Objective:

1) Fix the BGP annoucnment so the IX doesn't drop my connection.
2) Take 2 ports from the 3560 and truck them into the CCR1036-12G-4S.
3) On the Cisco I would like to break up my /21 into smaller sub-nets with there own vlans.
4) All traffic from the VLANs should routed back to out the CCR1036-12G-4S.

Any help would be much appreciated.
 
User avatar
joshaven
Member
Member
Posts: 438
Joined: Fri May 06, 2011 1:50 am
Location: USA
Contact:

Re: Config Help

Fri May 03, 2013 6:04 am

You can creat a route filter to drop all announcements except for your IP's and use the filter on your bgp interfaces to ensure you only announce your ip space.
 
FurSilver
just joined
Topic Author
Posts: 5
Joined: Thu Apr 25, 2013 12:01 am

Re: Config Help

Fri May 03, 2013 6:20 am

Do you have a sample config on how to setup this filter?
 
User avatar
joshaven
Member
Member
Posts: 438
Joined: Fri May 06, 2011 1:50 am
Location: USA
Contact:

Re: Config Help

Fri May 03, 2013 8:57 pm

See attached route filters
You do not have the required permissions to view the files attached to this post.
 
FurSilver
just joined
Topic Author
Posts: 5
Joined: Thu Apr 25, 2013 12:01 am

Re: Config Help

Tue May 07, 2013 1:50 am

chain=bgpfilter-21 prefix=1XX.XXX.XXX.0/21 prefix-length=21-24 invert-match=no action=accept set-bgp-prepend-path=""
chain=bgpfilter-21 invert-match=no action=discard set-bgp-prepend-path=""

I have both my ISP's set to Out Filter=bgpfilter-21.

Where do I need to use the in Filter, or just the out?
 
User avatar
joshaven
Member
Member
Posts: 438
Joined: Fri May 06, 2011 1:50 am
Location: USA
Contact:

Re: Config Help

Tue May 07, 2013 6:30 am

It sounds like you got it. You could call your upline and have them watch your routes and then ensure that you are not attempting to advertise something you shouldn't then try to advertise a private or something to ensure your filter is right.

Or if you have a couple of routers you can build your own test then watch the routes and route filter effects to gain comfort with them.
 
FurSilver
just joined
Topic Author
Posts: 5
Joined: Thu Apr 25, 2013 12:01 am

Re: Config Help

Wed May 08, 2013 7:20 am

These rules work, but now I have another issue. When I enable the BGP with my IPX, my network ips stop responding. Any suggestions.
 
User avatar
joshaven
Member
Member
Posts: 438
Joined: Fri May 06, 2011 1:50 am
Location: USA
Contact:

Re: Config Help

Wed May 08, 2013 2:59 pm

I am not sure what you mean by IPX, do you mean the Novel protocol IPX (http://en.wikipedia.org/wiki/Internetwo ... t_Exchange)?

All BGP is doing is communicating routes. If enabling BGP is breaking something then I would suppose that your not advertising a route or not receiving route advertisements properly.
 
FurSilver
just joined
Topic Author
Posts: 5
Joined: Thu Apr 25, 2013 12:01 am

Re: Config Help

Thu May 09, 2013 2:27 am

/routing bgp> network print
# NETWORK SYNCHRONIZE
0 198.XXX..0/21 no

/routing> bgp peer print
# INSTANCE REMOTE-ADDRESS REMOTE-AS
0 E default 64.xxx.xxx.xxx 19XXX
1 E default 208.XXX.XXX.5 1XX92

/routing> filter print
0 chain=bgpfilter-21 prefix=198.XXX.XXX.0/21 prefix-length=21-24
invert-match=no action=accept set-bgp-prepend-path=""
1 chain=bgpfilter-21 invert-match=no action=discard set-bgp-prepend-path=""

As soon as I enable the 2nd peer my IP's no longer respond. The 2nd Peer is on a local Exchange.

Any help on this would be much appreciated, as I think google is going to ban me for too much searching :).
 
User avatar
joshaven
Member
Member
Posts: 438
Joined: Fri May 06, 2011 1:50 am
Location: USA
Contact:

Re: Config Help

Fri May 10, 2013 12:35 am

You can look at how your BGP advertisements are working here: http://lg.level3.net/bgp/lg_bgp_main.php

If both ISP's are accepting your routes and your routes to them are correct then I don't know how it would be a BGP issue.

It could be a firewalling issue however: Check to see if you are dropping any traffic that has a TCP state of invalid. If you are routing all traffic out the first BGP peer, bringing the second peer up may cause the traffic to return over the second peer. Traffic that goes out one peer and returns on another peer would not all belong to the same TCP connection so the state would be invalid.

One solution would be to receive full routing tables from both peers which may allow your router to make the same routing decisions that the return path routers are making.

Who is online

Users browsing this forum: oskarsk and 22 guests