Re: BGP backdoor

All is weel that ends well :)
Finally u got the reason ! and thats what matter !

Good Luck mate :)

Gaurav Madan
CCIE

On Sat, Sep 4, 2010 at 2:03 PM, selamat pagi <ketimun_at_gmail.com> wrote:
> Thanks to all for your adviceIt seems that the config was ok, BUT the
> feature is not supported on 3560 / IOS
> From the config guide:
> Unsupported Commands in Cisco IOS Release 12.2(44)SE
> *- network
> *Sorry, I should have checked this in the beginning.. :-(
>
> Currently, I cannot change my setup to verify it with a supported box/IOS.
>
>
> On Fri, Sep 3, 2010 at 10:07 PM, Adrian Brayton <abrayton_at_gmail.com> wrote:
>
>> You're right... I was trying to answer from memory!
>>
>> Please do send ALL of the configs.
>>
>> I see you are running MPLS, are you using MP-BGP in the PE network and then
>> RIP on everything?
>>
>> (CE7 - RIP & EBGP) ---- (EBGP | MPLS | RIP - RIP | MPLS | EBGP) --- (EBGP &
>> RIP - CE8)
>>
>> Is that correct?
>>
>>
>>
>>
>> On Sep 3, 2010, at 3:43 PM, George Goglidze wrote:
>>
>> Hi Adrian,
>>
>> That's how you define backdoor route... you define network that you receive
>> from ebgp neighbour and put backdoor at the end.
>> So until that everything is fine.
>> Being the same AS is fine too, as they are NOT considered ibgp because the
>> neighbor is in different AS.
>> It just means that the same as is permitted in AS_PATH with command
>> allowas-in
>>
>> It should work fine really. Can you give us the whole configuration of
>> CE7/8 ??? Including RIP ?
>> As well, can you shutdown BGP completely and show us show ip route when BGP
>> is shutdown?
>>
>> Thanks,
>>
>>
>> On Fri, Sep 3, 2010 at 7:44 PM, Adrian Brayton <abrayton_at_gmail.com> wrote:
>>
>>> This is just a shot in the dark but looking at your configuration...
>>>
>>> On CE7, why are you advertising this:
>>>
>>> network 10.5.8.0 mask 255.255.255.0 backdoor
>>>
>>> On CE8, why are you advertising this:
>>>
>>> network 10.5.7.0 mask 255.255.255.0 backdoor
>>>
>>> What I think you are missing is that you cant add the "backdoor" command
>>> to a network that someone else is advertising.
>>>
>>> The network "10.5.7.0" is on CE7, but you have the backdoor command on
>>> CE8. The same for the other CE router.
>>>
>>> I could be wrong and I am sure that if I am that it will be pointed out
>>> more than once!
>>>
>>> HTHs
>>>
>>> On Sep 3, 2010, at 11:45 AM, Carlos G Mendioroz wrote:
>>>
>>> > Srinivas,
>>> > the AD of the route that is there is 20, so the problem seems to be that
>>> > backdoor is not kicking in.
>>> >
>>> > srinivas pv @ 3/9/2010 9:38 -0300 dixit:
>>> >> Hi,
>>> >> I think CE routes are not getting propagated through RIP. Could you try
>>> >> shutting down interfaces between CE and PE, so that you should see
>>> routes
>>> >> through RIP.
>>> >> Thanks,
>>> >> Srinivas
>>> >> On Fri, Sep 3, 2010 at 11:09 AM, selamat pagi <ketimun_at_gmail.com>
>>> wrote:
>>> >>> Trying to understand the usage of backdoor command in BGP.
>>> >>>
>>> >>> This is my Lab-setup. With the neigbors-loopbacks configured as
>>> backdoor,
>>> >>> I
>>> >>> would expect to see CE7 lo on CE8 as a RIP-route.
>>> >>> But I still get the eBGP route vie PE.
>>> >>>
>>> >>> ------------------------------------RIP
>>> ----------------------------------
>>> >>> |
>>> >>> |
>>> >>> CE7 -- eBGP --- PE2 --- MPLS --- PE5 -- eBGP -- CE8
>>> >>>
>>> >>>
>>> >>> CE7
>>> >>> interface Loopback0
>>> >>> ip address 10.5.7.7 255.255.255.0
>>> >>>
>>> >>> router bgp 200
>>> >>> no synchronization
>>> >>> bgp router-id 10.5.7.7
>>> >>> bgp log-neighbor-changes
>>> >>> network 10.5.7.0 mask 255.255.255.0
>>> >>> network 10.5.8.0 mask 255.255.255.0 backdoor
>>> >>> neighbor 10.5.27.2 remote-as 100
>>> >>> neighbor 10.5.27.2 allowas-in
>>> >>>
>>> >>>
>>> >>> CE8
>>> >>> interface Loopback0
>>> >>> ip address 10.5.8.8 255.255.255.0
>>> >>>
>>> >>> router bgp 200
>>> >>> bgp router-id 10.5.8.8
>>> >>> network 10.5.7.0 mask 255.255.255.0 backdoor
>>> >>> network 10.5.8.0 mask 255.255.255.0
>>> >>> neighbor 10.5.58.5 remote-as 100
>>> >>> neighbor 10.5.58.5 allowas-in
>>> >>>
>>> >>>
>>> >>> R8#sh ip route
>>> >>> 158.5.0.0/32 is subnetted, 1 subnets
>>> >>> B 158.5.6.6 [20/0] via 10.5.58.5, 14:53:51
>>> >>> 10.0.0.0/24 is subnetted, 5 subnets
>>> >>> C 10.5.8.0 is directly connected, Loopback0
>>> >>> B 10.5.7.0 [20/0] via 10.5.58.5, 00:00:06 <-- would
>>> expect to
>>> >>> get this via RIP
>>> >>> R 10.5.27.0 [120/1] via 10.5.78.7, 00:00:18, Vlan78
>>> >>> C 10.5.58.0 is directly connected, Vlan58
>>> >>> C 10.5.78.0 is directly connected, Vlan78
>>> >>>
>>> >>>
>>> >>> What do I miss here ?
>>> >>>
>>> >>> Thanks, keti
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> >>>
>>> http://www.cisco.com/en/US/tech/tk365/technologies_tech_note09186a00800c95bb.shtml#bgpbackdoor
>>> >>>
>>> >>>
>>> >>> Blogs and organic groups at http://www.ccie.net
>>> >>>
>>> >>>
>>> _______________________________________________________________________
>>> >>> Subscription information may be found at:
>>> >>> http://www.groupstudy.com/list/CCIELab.html
>>> >> Blogs and organic groups at http://www.ccie.net
>>> >> _______________________________________________________________________
>>> >> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>> >
>>> > --
>>> > Carlos G Mendioroz <tron_at_huapi.ba.ar> LW7 EQI Argentina
>>> >
>>> >
>>> > Blogs and organic groups at http://www.ccie.net
>>> >
>>> > _______________________________________________________________________
>>> > Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>>>
>>>
>>> Blogs and organic groups at http://www.ccie.net
>>>
>>> _______________________________________________________________________
>>> Subscription information may be found at:
>>> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Sat Sep 04 2010 - 14:09:47 ART