[c-nsp] Cisco Guard and loopback

[Andreas Friedrich]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Michael,
I am a little late. I do not read this list every day.
For my knowledge with version 5.0 you have to establish the BGP session
directly to one of the Ethernet interfaces. Starting with 5.1 it should
be possible to do it with the Loopback but I have not tested it yet.

Regards,
Andreas

Michael McCormack wrote:
> We are trying to set up  eBGP peering between a test router and Cisco
> Guard using loopback addresss and the following simple config
> 
> For some reason the peering will not establish to the Guard when we try
> to use the loopback address . Anybody got any suggestions ???
> 
>  
> 
>  
> 
> Router 1
> 
> interface Loopback0
> 
>  ip address 10.10.10.1 255.255.255.255
> 
>  
> 
> interface f0/0
> 
>  ip address 192.168.1.1 255.255.255.224
> 
> no shut
> 
> !
> 
> router bgp 100
> 
> bgp log-neighbor-changes
> 
> neighbor 10.10.10.2 remote-as 200
> 
> neighbor 10.10.10.2  ebgp-multihop 2
> 
> neighbor 10.10.10.2 update-source Loopback0
> 
> !
> 
> ip classless
> 
> ip route 10.10.10.2 255.255.255.255 192.168.1.2
> 
>  
> 
>  
> 
> Cisco Guard
> 
> interface Loopback0
> 
>  ip address 10.10.10.2 255.255.255.255
> 
>  
> 
> interface f0/0
> 
>  ip address 192.168.1.2 255.255.255.224
> 
> no shut
> 
> !
> 
> router bgp 200
> 
> bgp log-neighbor-changes
> 
> neighbor 10.10.10.1 remote-as 200
> 
> neighbor 10.10.10.1  ebgp-multihop 2 
> 
> neighbor 10.10.10.1 update-source Loopback0
> 
> !
> 
> ip classless
> 
> ip route 10.10.10.1 255.255.255.255 192.168.1.1
> 
>  
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/

- --
Andreas Friedrich
Network Engineer, IP Network Architecture
COLT Telecom GmbH		
Herriotstrasse 4
D-60528 Frankfurt

t +49 (0) 69 / 56606 - 6005
f +49 (0) 69 / 56606 - 6350
e andreasf at colt.net
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFEF8tJQNEM4kMUtboRApk3AKDUyGbsKGMqAPqhk3fU4rct+0u6vgCg21Al
yMxX3IHqprq8ZovgATr8X2Y=
=83kf
-----END PGP SIGNATURE-----