Cisco Systems BGP partial routes

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
BGP partial routes linguafr 08-26-08
Posted by linguafr on August 26, 2008, 4:45 pm
Please log in for more thread options


We are preparing new hw that will allow us to receive bgp routes =96
currently we=92re just broadcasting.
However, we know that our supervisor 32 engine does not have the
capability to receive the entire internet routing table.
One approach I=92m familiar with is only receiving routes for peers
directly connected to the provider.

Can you verify if this is a correct approach for example, w/ internap?

ip as-path access-list 100 permit ^12182_[0-9]* (sj)
ip as-path access-list 100 permit ^13789_[0-9]* (ny)

route-map inap-announce-in permit 10
match as-path 100

=2E..if we're peered with 3 tier 1 isps, how many routes might we expect
to receive?

Posted by Merv on August 27, 2008, 3:55 am
Please log in for more thread options


> We are preparing new hw that will allow us to receive bgp routes =96
> currently we=92re just broadcasting.
> However, we know that our supervisor 32 engine does not have the
> capability to receive the entire internet routing table.
> One approach I=92m familiar with is only receiving routes for peers
> directly connected to the provider.
>
> Can you verify if this is a correct approach for example, w/ internap?
>
> ip as-path access-list 100 permit ^12182_[0-9]* (sj)
> ip as-path access-list 100 permit ^13789_[0-9]* (ny)
>
> route-map inap-announce-in permit 10
> =A0match as-path 100
>
> ...if we're peered with 3 tier 1 isps, how many routes might we expect
> to receive?


try

^12182_?[0-9]*$

remember to entering Ctrl-V before entering the ?




Posted by Merv on August 27, 2008, 9:36 am
Please log in for more thread options


>
>
>
> > We are preparing new hw that will allow us to receive bgp routes =96
> > currently we=92re just broadcasting.
> > However, we know that our supervisor 32 engine does not have the
> > capability to receive the entire internet routing table.
> > One approach I=92m familiar with is only receiving routes for peers
> > directly connected to the provider.
>
> > Can you verify if this is a correct approach for example, w/ internap?
>
> > ip as-path access-list 100 permit ^12182_[0-9]* (sj)
> > ip as-path access-list 100 permit ^13789_[0-9]* (ny)
>
> > route-map inap-announce-in permit 10
> > =A0match as-path 100
>
> > ...if we're peered with 3 tier 1 isps, how many routes might we expect
> > to receive?
>
> try
>
> =A0^12182_?[0-9]*$
>
> remember to entering Ctrl-V before entering the ?

OBTW you should requet that your ISP only advertise partials to you so
that you router does not hav to filter full routes - leave the as
path filters for partials in place though

Also make sure to filter for you own networks in the inbound filters
to protect your network

Posted by linguafr on August 27, 2008, 2:33 pm
Please log in for more thread options


>
>
>
>
> > > We are preparing new hw that will allow us to receive bgp routes =96
> > > currently we=92re just broadcasting.
> > > However, we know that our supervisor 32 engine does not have the
> > > capability to receive the entire internet routing table.
> > > One approach I=92m familiar with is only receiving routes for peers
> > > directly connected to the provider.
>
> > > Can you verify if this is a correct approach for example, w/ internap=
?
>
> > > ip as-path access-list 100 permit ^12182_[0-9]* (sj)
> > > ip as-path access-list 100 permit ^13789_[0-9]* (ny)
>
> > > route-map inap-announce-in permit 10
> > > match as-path 100
>
> > > ...if we're peered with 3 tier 1 isps, how many routes might we expec=
t
> > > to receive?
>
> > try
>
> > ^12182_?[0-9]*$
>
> > remember to entering Ctrl-V before entering the ?
>
> OBTW you should requet that your ISP only advertise partials to you so
> that you router does not hav to filter full routes - leave the as
> path filters for partials in place though
>
> Also make sure to filter for you own networks in the inbound filters
> to protect your network

Why '?' in the as-path acl?
Good pt about filtering out our networks. I guess just
ip as-path access-list 101 deny *<our AS>* would work, no?

Posted by Merv on August 28, 2008, 10:12 am
Please log in for more thread options


>
>
>
>
>
>
>
> > > > We are preparing new hw that will allow us to receive bgp routes =
=96
> > > > currently we=92re just broadcasting.
> > > > However, we know that our supervisor 32 engine does not have the
> > > > capability to receive the entire internet routing table.
> > > > One approach I=92m familiar with is only receiving routes for peers
> > > > directly connected to the provider.
>
> > > > Can you verify if this is a correct approach for example, w/ intern=
ap?
>
> > > > ip as-path access-list 100 permit ^12182_[0-9]* (sj)
> > > > ip as-path access-list 100 permit ^13789_[0-9]* (ny)
>
> > > > route-map inap-announce-in permit 10
> > > > =A0match as-path 100
>
> > > > ...if we're peered with 3 tier 1 isps, how many routes might we exp=
ect
> > > > to receive?
>
> > > try
>
> > > =A0^12182_?[0-9]*$
>
> > > remember to entering Ctrl-V before entering the ?
>
> > OBTW you should requet that your ISP only advertise partials to you so
> > that you router does not hav to filter full routes =A0- leave the as
> > path filters for partials in place though
>
> > Also make sure to filter for you own networks in the inbound filters
> > to protect your network
>
> Why '?' in the as-path acl?
> Good pt about filtering out our networks. =A0I guess just
> ip as-path access-list 101 deny =A0*<our AS>* would work, no?- Hide quote=
d text -
>
> - Show quoted text -


You should have an inbound filter to block your network assigned
blocks; not by AS.


Similar ThreadsPosted
BGP partial routes August 26, 2008, 4:45 pm
Equipment for partial DS3 November 19, 2006, 12:02 pm
BGP routes disappearing October 9, 2005, 4:04 am
default routes PIX. February 3, 2006, 2:58 pm
PIX default routes ? August 15, 2006, 2:29 pm
Re: BGP default routes June 24, 2005, 1:09 am
Re: BGP default routes June 24, 2005, 3:28 am
BGP : Aggregate routes July 1, 2005, 1:12 pm
8k routes on a C3560G? May 23, 2007, 3:11 pm
BGP not seeing all local routes July 11, 2007, 12:08 pm
SUP-720-3B and 256k routes September 29, 2007, 5:36 pm
ASA with two default-routes December 20, 2007, 3:10 am
Load Balancing 2 Routes October 17, 2005, 8:08 am
Influencing OSPF Routes March 21, 2006, 8:07 pm
Routes received by BGP and OSPF February 5, 2007, 11:48 am