RE: Using Tunnels with iBGP

From: Kenneth Wygand (KWygand@customonline.com)
Date: Fri Aug 06 2004 - 11:20:24 GMT-3


Tim,

If you issue a "show ip bgp summary" shows the IP address of the remote
side of the tunnel, that means your IGP adjacency has been established
via the tunnel.

It depends on what you are trying to accomplish here. If R3 peers with
another AS and you want R3 to advertise routes it receives via this EBGP
relationship so that these routes will be available to R1, a tunnel
won't help you without "next-hop-self" attached to your "neighbor [R1]"
statement on R3. (I know this isn't your question but I think it's
important to mention). If you would like more of an explanation on
this, just let me know.

Nonetheless, if you use the "next-hop-self", then R1 should send to the
other side of the tunnel for the next-hop of those routes. You can
check this by doing a "show ip bgp [network]" and make sure the
"next-hop" is listed as the remote side of the tunnel interface. You
can also try to "traceroute" to this network and the remote end of the
tunnel should respond back as the first hop.

Does this help at all?

Kenneth E. Wygand
Systems Engineer, Project Services
CCIE #13720, CISSP #37102, CCNP/DP, ACSP,
Cisco IPT Design Specialist, MCP, CNA, Network+, A+
Custom Computer Specialists, Inc.
"Failure only occurs at the point in which one stops trying."
-Anonymous

Custom Computer Specialists, Inc.
"Celebrating 25 Years of Excellence"
 

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
ccie2be
Sent: Friday, August 06, 2004 9:57 AM
To: 'Brian McGahan'; 'Group Study'; samccie2004@yahoo.co.uk
Subject: Re: Using Tunnels with iBGP

Hey Sam,

It seems like you understand the issue here, but you didn't mention how
I
can verify if packets between the peers are using the tunnel rather than
just the IGP.

The problem is that the usual command to verify bgp is useless (it
seems) in
this scenario because peering will be established whether or not the
tunnel
is being used by the BGP peers.

Thanks for your input.

Tim
----- Original Message -----
From: <samccie2004@yahoo.co.uk>
To: "'ccie2be'" <ccie2be@nyc.rr.com>; "'Group Study'"
<ccielab@groupstudy.com>; "'Brian McGahan'"
<bmcgahan@internetworkexpert.com>
Sent: Tuesday, August 17, 2004 9:39 AM
Subject: RE: Using Tunnels with iBGP

> Not if u specify ur update source as tunnel interface and u peer with
> tunnel interface on remote router.
>
> I hope I understood ur Question correctly
>
> Sam
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf
Of
> ccie2be
> Sent: 06 August 2004 15:00
> To: Group Study; Brian McGahan
> Subject: Using Tunnels with iBGP
>
> Hi guys,
>
> Here's the scenario:
>
> R1 ----- R2 ---- R3
> | ------ tunnel --- |
>
>
> R1 and R3 are running BGP and are in the same AS.
>
> R2 is NOT running BGP & I'm not allowed to redist BGP into the IGP.
>
> Here's the problem:
>
> Assuming no eBGP peers have been set up at this point, how can the R1
to
> R3
> peering session and tunnel config be verified as correct?
>
> I assume that the output of the show ip bgp summary command will show
> that R1
> and R3 are successfully peering whether or not the tunnel is being
used.
>
> TIA, Tim
>
>



This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:34 GMT-3