[c-nsp] Source address on BGP peering set up
Piltrafilla
piltrafilla at gmail.com
Mon Jan 17 11:27:32 EST 2005
Hi people,
First of all, thank you for all your replies, I'm sorry for the delay
in my answer.
With your feedback I have tried a BGP peering on my home lab between a
Cisco and OpenBSD bgpd:
Cisco
primary 10.0.0.1
secondary 192.168.0.1
OpenBSD
primary 10.0.0.2
secondary 192.168.0.2
On OpenBSD bgpd configuration I have set up local-address for peer 10.0.0.1:
neighbor 10.0.0.1
{
local-address 10.0.0.2
remote-as 65500
}
After configuration on both sides, I did a clear ip bgp 192.168.0.2 on
the Cisco side to force reestablishing the peering as a client
(ephemeral to 179). That's the tcpdump on the OpenBSD side:
10.0.0.1.15357 > 192.168.0.2.179: S 2018010072:2018010072(0) win 16384
10.0.0.1.15357 > 192.168.0.2.179: S 2018010072:2018010072(0) win 16384
Although Cisco router has a connected secondary IP to peer
192.168.0.2, Cisco tries to set up the peering with the primary
address.
A few seconds later, OpenBSD successfully establishes peering with the
Cisco box as a client (ephemeral to 179) because of the possibility of
configuring local-address:
192.168.0.2.46380 > 192.168.0.1.179: S 957503115:957503115(0) win 65535
192.168.0.1.179 > 192.168.0.2.46380: S 949964186:949964186(0) ack
957503116 win 16384
192.168.0.2.46380 > 192.168.0.1.179: . ack 1 win 65535
192.168.0.2.46380 > 192.168.0.1.179: P 1:40(39) ack 1 win 65535 : BGP
[|BGP OPEN] (DF) [tos 0xc0]
I know that for many of you, this config could seem in someway really
stupid. That config was thought for a temporary peer migration not for
a definitive config.
Any comments on the results?
Take Care,
-- Carlos
On Fri, 14 Jan 2005 15:34:32 +0000 (GMT), Stephen J. Wilcox
<steve at telecomplete.co.uk> wrote:
> I thought I'd chip in as everyone else has had a go at this..
>
> On Fri, 14 Jan 2005, Piltrafilla wrote:
>
> > Anyone knows how BGP on a Cisco router choose source IP address for peering
> > establishment if no "update-source" command is applied to neighbor? Is it only
> > the primary IP address on the closest interface to neighbor?
>
> update-source will use the primary address, if no update source is applied it
> will use the ip on the outgoing interface
>
> > For instance, let's say that you would like to set up a peering using a
> > secondary IP address to between two directly-connected neighbors. Is it
> > setting up loopbacks, static /32 routes and update-source on the neighbors'
> > config the only way to do it?
>
> no you can just config it like any other ebgp directly connected peer
>
> > On bgpd of OpenBSD you could set up a "local-address" parameter per
> > neighbor or group that sets up source IP address used for that
> > peering. I haven't found any similar parameter on cisco bgp neighbors'
> > config.
>
> it doesnt have it
>
> Steve
>
>
More information about the cisco-nsp
mailing list