Archive

Latest posts — page 48

BGP Confederations: An Alternative to Route Reflectors

BGP confederations scale iBGP by dividing the AS into sub-ASes that speak confederation eBGP internally, while appearing as a single AS to the outside world. An alternative to route reflectors with tradeoffs you need to know.

BGP Route Reflectors: Eliminating the Full Mesh

Ten routers need 45 iBGP sessions. Fifty need 1,225. Route reflectors break the iBGP split-horizon rule in a controlled way, and are the standard scaling tool for iBGP in enterprise and service provider networks.

Featured

BGP Next-Hop-Self: When and Why You Need It

One of the most common iBGP problems is routes that show up in the BGP table but never hit the routing table because the next-hop is unreachable. Here is when next-hop-self is the fix, and when it actually makes things worse.

How to Configure iBGP Neighbors and Full Mesh

iBGP has rules eBGP does not: split-horizon, full-mesh, and next-hop preservation. Ignore any of them and routes vanish silently from your network. A practical guide to configuring iBGP neighbors and full mesh.

Featured

How to Configure eBGP Neighbors on Cisco IOS XE

A single mismatch in neighbor IP, AS number, or filtering keeps a BGP session down without a helpful error. A practical Cisco IOS XE eBGP configuration walkthrough including dual-homed peering and source/TTL considerations.

BGP Best Path Selection Algorithm: All 13 Steps on Real Output

BGP evaluates 13 steps in order and stops at the first one that produces a winner. Here is the full order, with steps 1 and 2 proven on real show ip bgp output from a three-AS CML lab where the best marker moves between two paths as one attribute changes.

BGP Session Authentication: MD5 and TCP-AO

An unauthenticated BGP session is vulnerable to TCP-based attacks and spoofed RSTs. MD5 has been the standard for decades; TCP-AO is the modern replacement. A practical guide to BGP session authentication.

Originating a Default Route in BGP

A BGP default route tells a peer to send anything it does not have a more specific path for. Different injection methods, default-originate, network, redistribute, have different behaviors and failure modes. Pick carefully.

BGP Route Aggregation and Summarization

The IPv4 BGP table has over 950,000 prefixes and growing. Route aggregation lets you advertise a summary instead of many specifics, reducing the routing table burden on your peers and the internet. Configuration and gotchas.

Cisco BGP Weight Attribute: Local Path Preference

Weight is the first step of Cisco BGP best-path selection, Cisco-proprietary, never advertised, and local to the router. The most targeted BGP traffic engineering tool when you need one router to override AS-wide policy.

BGP AS-Path Prepending: When It Works and When It Doesn't

AS-path prepending is the go-to tool for influencing inbound BGP traffic: artificially lengthen the AS-path so remote ASes prefer your other exit. It is blunt, global, and has real security implications. When it works, and when it does not.