Archive

Latest posts — page 59

BGP Route Aggregation and Summarization

The IPv4 BGP table has over 950,000 prefixes and growing. Route aggregation lets you advertise a summary instead of many specifics, reducing the routing table burden on your peers and the internet. Configuration and gotchas.

BGP AS-Path Prepending: When It Works and When It Doesn't

AS-path prepending is the go-to tool for influencing inbound BGP traffic: artificially lengthen the AS-path so remote ASes prefer your other exit. It is blunt, global, and has real security implications. When it works, and when it does not.

BGP Communities: Tag, Match, and Act on Cisco IOS XE

Most community write-ups stop at the set community line. This one follows the tag all the way through: R1 tags a prefix with 65001:200 and no-export, R2 prints the community and flags it as not advertised to EBGP peer, and R3 answers with % Network not in table. Captured on IOS XE 17.18.2 in CML.

BGP RPKI and Route Origin Validation on IOS XE

RPKI lets prefix owners sign ROAs that say which AS is authorized to originate their prefixes. Route Origin Validation rejects invalid routes. A practical guide to RPKI and ROV on Cisco IOS XE for internet-facing networks.

BGP Route Leaks and Hijacks: Detection and Prevention

BGP was designed when every AS was trusted. Accidental route leaks and deliberate prefix hijacks have caused repeated major outages. How to detect them, prevent them, and protect your AS from the blast radius when others make mistakes.

BGP Convergence: Timers, BFD, and Reducing Failover Time

Default BGP convergence can take 3 minutes to notice a dead peer. That is fine on the public internet and unacceptable in enterprise or data center BGP. Every knob for reducing BGP failover time on Cisco IOS XE, including BFD.