Archive

Latest posts — page 49

BGP Communities: Tag, Match, and Act on Cisco IOS XE

Most community write-ups stop at the set community line. This one follows the tag all the way through: R1 tags a prefix with 65001:200 and no-export, R2 prints the community and flags it as not advertised to EBGP peer, and R3 answers with % Network not in table. Captured on IOS XE 17.18.2 in CML.

BGP RPKI and Route Origin Validation on IOS XE

RPKI lets prefix owners sign ROAs that say which AS is authorized to originate their prefixes. Route Origin Validation rejects invalid routes. A practical guide to RPKI and ROV on Cisco IOS XE for internet-facing networks.

BGP Route Leaks and Hijacks: Detection and Prevention

BGP was designed when every AS was trusted. Accidental route leaks and deliberate prefix hijacks have caused repeated major outages. How to detect them, prevent them, and protect your AS from the blast radius when others make mistakes.

BGP Convergence: Timers, BFD, and Reducing Failover Time

Default BGP convergence can take 3 minutes to notice a dead peer. That is fine on the public internet and unacceptable in enterprise or data center BGP. Every knob for reducing BGP failover time on Cisco IOS XE, including BFD.

Troubleshooting BGP Route Advertisement Problems

The BGP session is Established but routes are missing. A missing prefix can be stopped at any of several pipeline stages, from injection to best path to output filtering. A methodical troubleshooting guide to BGP route advertisement.

Troubleshooting BGP Neighbor Adjacency Issues

A BGP session that will not reach Established is the most common BGP issue. The FSM state tells you exactly where the problem is; the root cause inside each state can be one of many things. A systematic IOS XE methodology.