Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 395
  • Last Modified:

bgp question

hi

we have a multihomed bgp environment with our own AS.
We have been given a /24 ip address range (which we have subnetted to use 4 subnets /26 - using the
all zero and all ones subnet)

Given that we have our own AS number and IP address range, is the AS number linked with our ip address
range? is this linked solely with the "network" command in BGP config?

see configuration below:

router bgp x
no synchronization
bgp log-neighbor-changes
network a.a.a.0
neighbor x.x.x.x remote-as 702
neighbor x.x.x.x description UUnet s2/1
neighbor x.x.x.x filter-list 1 out
neighbor y.y.y.y remote-as 5378
neighbor y.y.y.y description C&W s2/0
neighbor y.y.y.y filter-list 1 out

so whatever we put in for the network a.a.a.0

ie network a.a.a.0 is important, as this will be advertised out to other BGP As'es, for instance if
I changed this to another ip address range would this cause carnage on the internet? (not that i would!
our isps trusts us!)

We have been using neigbour y.y.y.y for 2 months. We added neigbour x.x.x.x today. How long would it
take for other BGP routers to have x.x.x.x listed as a alternative AS path (via AS 702)?? to our a.a.a.0
network address range?

Would it be possible for us to be a transit AS... i know that this is a bad idea.. but how is it configured?

Thanks
0
dbrannigan
Asked:
dbrannigan
  • 5
1 Solution
 
mmedwidCommented:
I believe you'd only want to be a transit AS if you are an ISP.  It souns like you are an enterprise - no?

Your ISPs probably have filters up to keep you from causing too much mayhem.   But without putting the whole block into your network statement - you risk folks not being able to reach those subnets that are excluded.  
0
 
mmedwidCommented:
http://www.cisco.com/warp/public/459/bgpfaq_5816.shtml#6

Check out the entire faq actually.  
0
 
mmedwidCommented:
Oops - this is the part I meant to call your attention to...

Q. How can I verify if a BGP router is announcing its BGP networks and propagating them to the global BGP mesh?
A. To check if the IP blocks are announced to the directly connected ISP, use the following commands. The show ip bgp neighbors [address] advertise-routes command shows which messages are being sent. The show ip bgp neighbors [address] routes command shows which messages are being received.
Note: The show ip bgp neighbors [address] advertise-routes command doesn't take into account any outbound policies you may have applied. In future IOS versions the command output will be changed to reflect the outbound policies.

To verify how the IP blocks are getting propagated to the global BGP mesh via the directly connected ISP, log onto a route server  on the Internet and look for the BGP entries of the prefix in the route server.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
mmedwidCommented:
And to see how you look from the perspective of the outside work...select any of the choices, select BGP and enter the block you are wondering about.

http://nitrous.digex.net/
0
 
dbranniganAuthor Commented:
thanks mate.. sorry for the delay in accepting your answer!
0
 
mmedwidCommented:
No problem.  Glad to be of assistance!  -Michael
0

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 5
Tackle projects and never again get stuck behind a technical roadblock.
Join Now