JNCIP- EBGP peer-filter
working on the EBG Pcase study..i configured and applied the peer-filter-in and i see the following output on r2
root@r2# run show route receive-protocol bgp 10.0.5.254
inet.0: 54 destinations, 62 routes (50 active, 0 holddown, 5 hidden)
Prefix Nexthop MED Lclpref AS path
* 3.4.0.0/20 10.0.5.254 1492 I
* 6.0.0.0/7 10.0.5.254 1492 I
* 120.120.0.0/24 10.0.5.254 1492 I
* 120.120.1.0/24 10.0.5.254 1492 I
* 120.120.2.0/24 10.0.5.254 1492 I
* 120.120.3.0/24 10.0.5.254 1492 I
* 120.120.4.0/24 10.0.5.254 1492 I
* 120.120.5.0/24 10.0.5.254 1492 I
* 120.120.6.0/24 10.0.5.254 1492 I
* 120.120.7.0/24 10.0.5.254 1492 I
* 120.120.69.128/25 10.0.5.254 1492 I
and i see these being advertised out to r3 and r4 with correct prepend and local pref. Here's the output showing advertisement to r4.
root@r2# run show route advertising-protocol bgp 10.0.3.4
inet.0: 54 destinations, 62 routes (50 active, 0 holddown, 5 hidden)
Prefix Nexthop MED Lclpref AS path
* 3.4.0.0/20 10.0.5.254 101 65412 65412 1492 I
* 6.0.0.0/7 10.0.5.254 101 65412 65412 1492 I
* 120.120.0.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.1.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.2.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.3.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.4.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.5.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.6.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.7.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.69.128/25 10.0.5.254 101 65412 65412 1492 I
* 192.168.20.0/24 Self 100 I
* 192.168.100.0/24 Self 100 I
but on R4 it's showing that these routes are looped and not installed..i enable keep all knob to see these
root@r4# run show route receive-protocol bgp 10.0.6.2 hidden detail
inet.0: 64 destinations, 89 routes (46 active, 0 holddown, 36 hidden)
3.4.0.0/20 (2 entries, 0 announced)
Nexthop: 10.0.5.254
Localpref: 101
AS path: 65412 65412 1492 I (Looped: 65000)
Communities: 65412:201
6.0.0.0/7 (2 entries, 0 announced)
Nexthop: 10.0.5.254
Localpref: 101
AS path: 65412 65412 1492 I (Looped: 65000)
Communities: 65412:201
R3 and R4 both configured same way...type internal;
local-address 10.0.3.4;
advertise-inactive;
cluster 1.1.1.1;
neighbor 10.0.3.3;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
not sure what's going on..any pointers would be appreciated..thanks
root@r2# run show route receive-protocol bgp 10.0.5.254
inet.0: 54 destinations, 62 routes (50 active, 0 holddown, 5 hidden)
Prefix Nexthop MED Lclpref AS path
* 3.4.0.0/20 10.0.5.254 1492 I
* 6.0.0.0/7 10.0.5.254 1492 I
* 120.120.0.0/24 10.0.5.254 1492 I
* 120.120.1.0/24 10.0.5.254 1492 I
* 120.120.2.0/24 10.0.5.254 1492 I
* 120.120.3.0/24 10.0.5.254 1492 I
* 120.120.4.0/24 10.0.5.254 1492 I
* 120.120.5.0/24 10.0.5.254 1492 I
* 120.120.6.0/24 10.0.5.254 1492 I
* 120.120.7.0/24 10.0.5.254 1492 I
* 120.120.69.128/25 10.0.5.254 1492 I
and i see these being advertised out to r3 and r4 with correct prepend and local pref. Here's the output showing advertisement to r4.
root@r2# run show route advertising-protocol bgp 10.0.3.4
inet.0: 54 destinations, 62 routes (50 active, 0 holddown, 5 hidden)
Prefix Nexthop MED Lclpref AS path
* 3.4.0.0/20 10.0.5.254 101 65412 65412 1492 I
* 6.0.0.0/7 10.0.5.254 101 65412 65412 1492 I
* 120.120.0.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.1.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.2.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.3.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.4.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.5.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.6.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.7.0/24 10.0.5.254 101 65412 65412 1492 I
* 120.120.69.128/25 10.0.5.254 101 65412 65412 1492 I
* 192.168.20.0/24 Self 100 I
* 192.168.100.0/24 Self 100 I
but on R4 it's showing that these routes are looped and not installed..i enable keep all knob to see these
root@r4# run show route receive-protocol bgp 10.0.6.2 hidden detail
inet.0: 64 destinations, 89 routes (46 active, 0 holddown, 36 hidden)
3.4.0.0/20 (2 entries, 0 announced)
Nexthop: 10.0.5.254
Localpref: 101
AS path: 65412 65412 1492 I (Looped: 65000)
Communities: 65412:201
6.0.0.0/7 (2 entries, 0 announced)
Nexthop: 10.0.5.254
Localpref: 101
AS path: 65412 65412 1492 I (Looped: 65000)
Communities: 65412:201
R3 and R4 both configured same way...type internal;
local-address 10.0.3.4;
advertise-inactive;
cluster 1.1.1.1;
neighbor 10.0.3.3;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
not sure what's going on..any pointers would be appreciated..thanks
Comments
-
hoogen82 Member Posts: 272Could you post R1,R2,R3 and R4 configuration.. Also just about wondering why you have a prepend 65412 twice... I do not recollect anything like that...
show route protocol ospf from R4 and R2 would also be nice..IS-IS Sleeps.
BGP peers are quiet.
Something must be wrong. -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□Could you post R1,R2,R3 and R4 configuration.. Also just about wondering why you have a prepend 65412 twice... I do not recollect anything like that...
show route protocol ospf from R4 and R2 would also be nice..
the task requires that as should be prepended twice. here's the task
"Prepend 64512 64512 to all routes received from P1. Ensure that transit providers do not
receive these AS numbers."
i will post the config shortly -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□i'm using ex-4200 for r1 and r2 so the config is pretty long..i'm just posting the routing replated config. let me know if you need more. i also using this as c1, c2 and t2
R1
routing-options {
static {
route 192.168.10.0/24 reject;
route 192.168.100.0/24 reject;
}
autonomous-system 65000;
confederation 65412 members [ 65000 65001 ];
}
protocols {
bgp {
export ibgp;
group 65000 {
type internal;
local-address 10.0.6.1;
neighbor 10.0.3.3;
neighbor 10.0.3.4;
}
group p1 {
type external;
import peer-filter-in;
neighbor 10.0.5.254 {
peer-as 1492;
}
}
}
ospf {
export external;
area 0.0.0.1 {
nssa;
interface ge-0/0/0.0 {
passive;
priority 0;
}
interface ge-0/0/2.0 {
priority 0;
}
interface ge-0/0/1.0 {
priority 0;
}
interface lo0.0;
interface ge-0/0/1.200;
}
}
lldp {
enable;
interface all;
}
}
policy-options {
policy-statement external {
term t1 {
from {
protocol direct;
route-filter 10.0.5.0/24 exact;
}
then {
metric 10;
tag 420;
external {
type 1;
}
accept;
}
}
term t2 {
then reject;
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.0.0/16 longer;
}
then accept;
}
}
policy-statement nhs {
term 1 {
from {
instance t2;
protocol [ bgp static ];
}
then {
next-hop self;
}
}
}
policy-statement null {
then reject;
}
policy-statement peer-filter-in {
term block-rfc1918 {
from {
route-filter 10.0.0.0/8 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 0.0.0.0/0 through 0.0.0.0/32 reject;
}
}
term kill-27-or-longer {
from {
route-filter 0.0.0.0/0 prefix-length-range /27-/32 reject;
}
}
term clear-comm {
then {
community delete all-comms;
}
}
term tag-p1 {
from as-path peer-1;
then {
community add peer-1;
as-path-prepend "65412 65412";
}
}
}
policy-statement r4 {
term 1 {
from {
instance c1;
protocol static;
route-filter 200.0.0.0/8 orlonger;
route-filter 32.0.0.0/8 longer;
route-filter 172.16.0.0/16 orlonger;
route-filter 201.0.0.0/8 orlonger;
}
then accept;
}
}
policy-statement r7 {
term 1 {
from {
instance c2;
protocol static;
}
then {
as-path-prepend 65020;
accept;
}
}
term 2 {
from {
instance c2;
protocol direct;
route-filter 201.201.0.0/24 exact;
}
then accept;
}
}
policy-statement static {
term 1 {
from {
instance t2;
route-filter 120.120.0.0/16 orlonger reject;
route-filter 200.200.0.0/16 orlonger reject;
}
}
from protocol static;
then accept;
}
community all-comms members *:*;
community cust-1 members 65412:301;
community cust-2 members 65412:302;
community peer-1 members 65412:201;
community trans-1 members 65412:101;
community trans-2 members 65412:102;
as-path peer-1 ".* 1492";
}
routing-instances {
c1 {
instance-type virtual-router;
interface ge-0/0/24.0;
interface lo0.1;
routing-options {
static {
route 200.200.0.0/24 discard;
route 200.200.1.0/24 discard;
route 200.200.2.0/24 discard;
route 200.200.3.0/24 discard;
route 200.200.4.0/24 discard;
route 200.200.5.0/24 discard;
route 200.200.6.0/24 discard;
route 200.200.7.0/24 discard;
route 32.0.0.0/16 {
discard;
as-path {
path 420;
}
}
route 200.200.0.0/28 discard;
route 10.0.1.0/24 discard;
route 200.200.5.128/25 discard;
route 10.0.3.4/32 next-hop [ 172.16.0.5 172.16.0.9 ];
route 201.201.0.0/16 {
discard;
as-path {
path 65020;
}
}
}
autonomous-system 65010;
}
protocols {
bgp {
group r4 {
type external;
multihop;
local-address 200.200.0.1;
authentication-key "$9$UIjHm5T3pu1QF"; ## SECRET-DATA
export r4;
peer-as 65412;
neighbor 10.0.3.4;
}
}
}
}
c2 {
instance-type virtual-router;
interface ge-0/0/13.50;
routing-options {
static {
route 201.201.0.0/24 discard;
route 201.201.1.0/24 discard;
route 201.201.2.0/24 discard;
route 201.201.3.0/24 discard;
route 201.201.4.0/24 discard;
route 201.201.5.0/24 discard;
route 201.201.6.0/24 discard;
route 201.201.7.0/24 discard;
route 0.0.0.0/0 {
discard;
as-path {
path "62 39";
}
}
route 64.0.0.0/7 discard;
route 201.201.0.7/32 discard;
route 210.210.16.128/26 {
discard;
as-path {
path 65010;
}
}
route 200.200.0.0/16 {
discard;
as-path {
path 65010;
}
}
}
router-id 201.201.0.1;
autonomous-system 65020;
}
protocols {
bgp {
group r7 {
type external;
neighbor 172.16.0.25 {
export r7;
peer-as 65413;
}
}
}
}
}
t2 {
instance-type virtual-router;
interface ge-0/0/12.0;
interface ge-0/0/13.40;
routing-options {
static {
route 220.0.0.0/28 discard;
route 120.120.6.0/24 {
discard;
community 65050:100;
}
route 128.128.128.0/17 discard;
route 130.130.0.0/16 discard;
route 192.0.2.0/24 discard;
}
autonomous-system 65222;
}
protocols {
bgp {
group internal {
type internal;
export nhs;
neighbor 10.0.1.65;
}
group ext {
type external;
export static;
neighbor 172.16.0.21 {
peer-as 65412;
}
neighbor 172.16.0.17 {
peer-as 65412;
}
}
}
}
}
uplink {
instance-type virtual-router;
interface ge-0/0/34.0;
routing-options {
static {
route 0.0.0.0/0 next-hop 10.234.168.1;
}
}
}
} -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□R2
routing-options {
static {
route 192.168.20.0/24 reject;
route 192.168.100.0/24 reject;
}
autonomous-system 65000;
confederation 65412 members [ 65000 65001 ];
}
protocols {
bgp {
export ibgp;
group 65000 {
type internal;
local-address 10.0.6.2;
neighbor 10.0.3.3;
neighbor 10.0.3.4;
}
group p1 {
type external;
import peer-filter-in;
neighbor 10.0.5.254 {
peer-as 1492;
}
}
}
ospf {
export external;
area 0.0.0.1 {
nssa;
interface ge-0/0/0.0 {
passive;
}
interface ge-0/0/3.0;
interface ge-0/0/1.0;
interface ge-0/0/2.0;
interface lo0.0;
}
}
lldp {
enable;
interface all;
}
}
policy-options {
policy-statement external {
term 1 {
from {
protocol direct;
route-filter 10.0.5.0/24 exact;
}
then {
metric 10;
tag 420;
external {
type 1;
}
accept;
}
}
term 2 {
then reject;
}
}
policy-statement ibgp {
term 2 {
from {
route-filter 192.168.100.0/24 exact;
}
then {
community add r2;
accept;
}
}
term 1 {
from {
protocol static;
route-filter 192.168.0.0/16 longer;
}
then accept;
}
}
policy-statement peer-filter-in {
term block-rfc1918 {
from {
route-filter 10.0.0.0/8 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 0.0.0.0/0 through 0.0.0.0/32 reject;
}
}
term kill-27-or-longer {
from {
route-filter 0.0.0.0/0 prefix-length-range /27-/32 reject;
}
}
term clear-comm {
then {
community delete all-comms;
}
}
term tag-p1 {
from as-path peer-1;
then {
community add peer-1;
as-path-prepend "65412 65412";
}
}
term prefer-2 {
from community peer-1;
then {
local-preference 101;
}
}
}
community all-comms members *:*;
community cust-1 members 65412:301;
community cust-2 members 65412:302;
community peer-1 members 65412:201;
community r2 members 65412:2;
community trans-1 members 65412:101;
community trans-2 members 65412:102;
as-path peer-1 ".* 1492";
}
[EMAIL="oot@r2"]oot@r2[/EMAIL]# run show route protocol ospf terse
inet.0: 54 destinations, 62 routes (50 active, 0 holddown, 5 hidden)
+ = Active Route, - = Last Active, * = Both
A Destination P Prf Metric 1 Metric 2 Next hop AS path
* 0.0.0.0/0 O 150 2 10.0.4.9
>10.0.4.1
* 10.0.3.3/32 O 10 1 >10.0.4.1
* 10.0.3.4/32 O 10 1 >10.0.4.9
* 10.0.4.12/30 O 10 2 >10.0.4.1
10.0.4.5
10.0.5.0/24 O 150 11 >10.0.4.5
* 10.0.6.1/32 O 10 1 >10.0.4.5
* 224.0.0.5/32 O 10 1 MultiRecv
R3- Also got t1 routing instance
[EMAIL="root@r3"]root@r3[/EMAIL]# show
## Last changed: 2010-06-19 09:21:44 UTC
version 8.4R1.13;
system {
host-name r3;
root-authentication {
encrypted-password "$1$IhRoMXLt$DC1ah4qfRI2RVB8IVHWSj0"; ## SECRET-DATA
}
login {
user rhiadmin {
uid 2002;
class super-user;
authentication {
encrypted-password "$1$yRCYwIAI$2wjgG/LxLEtyfZyGBU.Wd1"; ## SECRET-DATA
}
}
}
services {
ftp;
ssh;
web-management {
http {
interface [ ge-0/0/0.0 ge-0/0/1.0 ge-0/0/2.0 ge-0/0/3.0 ];
}
}
}
syslog {
user * {
any emergency;
}
file messages {
any any;
authorization info;
}
file interactive-commands {
interactive-commands any;
}
}
}
interfaces {
ge-0/0/0 {
vlan-tagging;
speed 1g;
link-mode full-duplex;
unit 200 {
vlan-id 200;
family inet {
address 10.0.4.13/30;
}
}
}
lt-0/0/0 {
unit 1 {
encapsulation frame-relay;
dlci 123;
peer-unit 2;
family inet {
address 172.16.0.13/30;
}
}
unit 2 {
encapsulation frame-relay;
dlci 123;
peer-unit 1;
family inet {
address 172.16.0.14/30;
}
}
}
ge-0/0/1 {
unit 0 {
family inet {
address 10.0.4.1/30;
}
}
}
ge-0/0/2 {
unit 0 {
family inet {
address 172.16.0.17/30;
}
}
}
ct1-5/0/0 {
no-partition interface-type t1;
}
t1-5/0/0 {
encapsulation ppp;
unit 0 {
family inet {
address 10.0.2.2/30;
}
}
}
ct1-5/0/1 {
no-partition interface-type t1;
}
t1-5/0/1 {
dce;
encapsulation frame-relay;
unit 0 {
multipoint;
family inet {
address 10.0.2.5/30 {
multipoint-destination 10.0.2.6 dlci 100;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 10.0.3.3/32;
}
}
}
}
routing-options {
static {
route 192.168.3.0/24 reject;
}
autonomous-system 65000;
confederation 65412 members [ 65000 65001 ];
}
protocols {
bgp {
import prefer-2;
export ibgp;
group 65000 {
type internal;
local-address 10.0.3.3;
advertise-inactive;
##
## Warning: requires 'bgp-reflection' license
##
cluster 1.1.1.1;
neighbor 10.0.3.4;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
}
group c-bgp {
type external;
neighbor 10.0.2.1 {
peer-as 65001;
}
}
group t1-t2 {
type external;
advertise-inactive;
damping;
import damp;
peer-as 65222;
multipath;
neighbor 172.16.0.14;
neighbor 172.16.0.18;
}
}
ospf {
area 0.0.0.1 {
nssa {
default-lsa {
default-metric 1;
metric-type 1;
type-7;
}
no-summaries;
}
area-range 10.0.4.0/22;
interface lo0.0;
interface ge-0/0/0.0;
interface ge-0/0/1.0;
interface ge-0/0/0.200;
}
area 0.0.0.0 {
interface t1-5/0/0.0 {
authentication {
md5 100 key "$9$X67NVYq.5T39"; ## SECRET-DATA
}
}
interface t1-5/0/1.0 {
interface-type nbma;
authentication {
md5 100 key "$9$NmVs4PfzF/t"; ## SECRET-DATA
}
neighbor 10.0.2.6 eligible;
}
}
}
}
policy-options {
policy-statement damp {
term 1 {
from {
route-filter 210.0.0.0/16 orlonger damping none;
route-filter 0.0.0.0/0 prefix-length-range /0-/8 damping none;
route-filter 0.0.0.0/0 prefix-length-range /9-/16 damping low;
route-filter 0.0.0.0/0 prefix-length-range /17-/32 damping high;
}
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.0.0/16 longer;
}
then accept;
}
}
policy-statement nhs {
term 1 {
from {
instance T1;
protocol [ bgp static ];
}
then {
next-hop self;
}
}
}
policy-statement null {
then reject;
}
policy-statement prefer-2 {
term 1 {
from community r2;
then {
local-preference 200;
}
}
}
policy-statement static {
term 1 {
from {
instance T1;
protocol static;
route-filter 120.120.0.0/16 orlonger reject;
route-filter 200.200.0.0/16 orlonger reject;
}
}
term 2 {
from {
instance T1;
protocol static;
}
then accept;
}
}
community r2 members 65412:2;
damping none {
disable;
}
damping high {
half-life 25;
reuse 1500;
}
damping low {
half-life 20;
reuse 1000;
}
}
routing-instances {
T1 {
instance-type virtual-router;
interface lt-0/0/0.2;
routing-options {
static {
route 207.17.136.192/32 next-hop 10.0.1.201;
route 172.17.0.0/16 discard;
route 0.0.0.0/16 discard;
route 130.130.0.0/16 discard;
}
generate {
route 200.0.0.0/16;
}
autonomous-system 65222;
}
protocols {
bgp {
group r3 {
type external;
export static;
peer-as 65412;
neighbor 172.16.0.13 {
peer-as 65412;
}
}
group test {
type internal;
##
## Warning: requires 'bgp-reflection' license
##
cluster 130.130.1.1;
neighbor 10.0.1.201 {
export null;
}
neighbor 10.0.1.66 {
export nhs;
}
}
}
}
}
} -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□r4- also P1
[EMAIL="root@r4"]root@r4[/EMAIL]# show
## Last changed: 2010-06-19 07:27:34 UTC
version 8.4R1.13;
system {
host-name r4;
root-authentication {
encrypted-password "$1$0mtVW/w4$ciz7JkLswz90yN.qVMb/F."; ## SECRET-DATA
}
services {
ssh;
telnet;
web-management {
http {
interface ge-0/0/0.0;
}
}
}
syslog {
file messages {
any any;
}
}
}
interfaces {
ge-0/0/0 {
speed 1g;
link-mode full-duplex;
unit 0 {
family inet {
address 10.0.5.254/24;
}
}
}
ge-0/0/1 {
unit 0 {
family inet {
address 10.0.4.9/30;
}
}
}
ge-0/0/2 {
unit 0 {
family inet {
address 172.16.0.5/30;
}
}
}
ct1-3/0/0 {
no-partition interface-type t1;
}
t1-3/0/0 {
encapsulation ppp;
unit 0 {
family inet {
address 10.0.2.10/30;
}
}
}
ct1-3/0/1 {
no-partition interface-type t1;
}
t1-3/0/1 {
encapsulation frame-relay;
unit 0 {
multipoint;
family inet {
address 10.0.2.6/30 {
multipoint-destination 10.0.2.5 dlci 100;
}
}
}
}
lo0 {
unit 0 {
family inet {
address 10.0.3.4/32;
}
}
unit 1 {
family inet {
address 120.120.0.1/32;
}
}
}
}
routing-options {
static {
route 200.200.0.1/32 next-hop [ 172.16.0.6 172.16.0.10 ];
}
autonomous-system 65000;
confederation 65412 members [ 65000 65001 ];
}
protocols {
bgp {
traceoptions {
file bgp;
flag state;
flag open;
}
keep all;
import prefer-2;
family inet {
unicast {
prefix-limit {
maximum 10;
}
}
}
export ibgp;
group 65000 {
type internal;
local-address 10.0.3.4;
advertise-inactive;
##
## Warning: requires 'bgp-reflection' license
##
cluster 1.1.1.1;
neighbor 10.0.3.3;
neighbor 10.0.6.1;
neighbor 10.0.6.2;
}
group c-bgp {
type external;
neighbor 10.0.2.9 {
peer-as 65001;
}
}
group c1 {
type external;
multihop;
local-address 10.0.3.4;
import cust-filter-in;
authentication-key "$9$8bMX7VsYoiHm24"; ## SECRET-DATA
peer-as 65010;
neighbor 200.200.0.1;
}
}
ospf {
area 0.0.0.1 {
nssa {
default-lsa {
default-metric 1;
metric-type 1;
type-7;
}
no-summaries;
}
area-range 10.0.4.0/22;
interface ge-0/0/1.0;
}
area 0.0.0.0 {
interface t1-3/0/0.0 {
authentication {
md5 100 key "$9$H.fz1IcSeW"; ## SECRET-DATA
}
}
interface t1-3/0/1.0 {
interface-type nbma;
authentication {
md5 100 key "$9$cQxrK84oGUHm"; ## SECRET-DATA
}
neighbor 10.0.2.5 eligible;
}
}
}
}
policy-options {
policy-statement cust-filter-in {
term rfc1918 {
from {
route-filter 10.0.0.0/8 orlonger reject;
route-filter 192.168.0.0/16 orlonger reject;
route-filter 172.16.0.0/12 orlonger reject;
route-filter 0.0.0.0/0 through 0.0.0.0/32 reject;
}
}
term kill-27-or-longer {
from {
route-filter 0.0.0.0/0 prefix-length-range /27-/32 reject;
}
}
term tag-cust1 {
from as-path cust-1;
then {
community add cust-1;
}
}
term tag-cust2 {
from as-path cust-2;
then {
community add cust-2;
}
}
term prefer-cust {
from as-path [ cust-1 cust-2 ];
then {
local-preference 101;
next policy;
}
}
term kill-rest {
then reject;
}
}
policy-statement ibgp {
term 1 {
from {
protocol static;
route-filter 192.168.0.0/16 longer;
}
then accept;
}
}
policy-statement prefer-2 {
term 1 {
from community r2;
then {
local-preference 200;
}
}
}
policy-statement r1-r2 {
term 1 {
from {
route-filter 120.120.7.0/24 exact;
}
then {
community add prefer;
accept;
}
}
term 2 {
from {
instance p1;
protocol static;
}
then accept;
}
}
community cust-1 members 65412:301;
community cust-2 members 65412:302;
community peer-1 members 65412:201;
community prefer members 65050:100;
community r2 members 65412:2;
community trans-1 members 65412:101;
community trans-2 members 65412:102;
as-path cust-1 ".* 65010";
as-path cust-2 ".* 65020";
}
routing-instances {
p1 {
instance-type virtual-router;
interface ge-0/0/0.0;
interface lo0.1;
routing-options {
static {
route 120.120.0.0/24 discard;
route 120.120.1.0/24 discard;
route 120.120.2.0/24 discard;
route 120.120.3.0/24 discard;
route 120.120.4.0/24 discard;
route 120.120.5.0/24 discard;
route 120.120.6.0/24 discard;
route 120.120.7.0/24 discard;
route 120.120.69.128/25 discard;
route 172.17.0.0/24 discard;
route 192.168.4.0/24 discard;
route 0.0.0.0/4 discard;
route 0.0.0.0/0 discard;
route 3.4.0.0/20 discard;
route 6.0.0.0/7 discard;
route 120.120.69.0/24 {
discard;
as-path {
path 65412;
}
}
}
autonomous-system 1492;
}
protocols {
bgp {
group r1-r2 {
type external;
export r1-r2;
peer-as 65412;
neighbor 10.0.5.1;
neighbor 10.0.5.2;
}
}
}
}
}
[edit]
[EMAIL="root@r4"]root@r4[/EMAIL]# run show route protocol ospf terse
inet.0: 64 destinations, 86 routes (46 active, 0 holddown, 36 hidden)
+ = Active Route, - = Last Active, * = Both
A Destination P Prf Metric 1 Metric 2 Next hop AS path
* 10.0.2.0/30 O 10 130 >10.0.2.5
10.0.2.8/30 O 10 65 >t1-3/0/0.0
* 10.0.3.3/32 O 10 2 >10.0.4.10
* 10.0.3.5/32 O 10 65 >t1-3/0/0.0
* 10.0.4.0/22 O 10 16777215 Discard
* 10.0.4.0/30 O 10 2 >10.0.4.10
* 10.0.4.4/30 O 10 2 >10.0.4.10
* 10.0.4.12/30 O 10 3 >10.0.4.10
* 10.0.5.0/24 O 150 11 >10.0.4.10
* 10.0.6.1/32 O 10 2 >10.0.4.10
* 10.0.6.2/32 O 10 1 >10.0.4.10
* 10.0.8.0/30 O 10 67 >t1-3/0/0.0
* 10.0.8.4/30 O 10 66 >t1-3/0/0.0
* 10.0.8.8/30 O 10 66 >t1-3/0/0.0
* 10.0.9.6/32 O 10 66 >t1-3/0/0.0
* 10.0.9.7/32 O 10 66 >t1-3/0/0.0
* 172.16.40.0/30 O 10 67 >t1-3/0/0.0
* 172.16.40.4/30 O 10 67 >t1-3/0/0.0
* 192.168.0.0/22 O 150 0 >t1-3/0/0.0
* 224.0.0.5/32 O 10 1 MultiRecv -
RabeenZhu Member Posts: 16 ■□□□□□□□□□you local as is 65412, and you prepend 65412!!
this is the problem.
you should prepend 64512 64512
Guess you are going to take the JNCIP exam next week BJ? -
hoogen82 Member Posts: 272Well like Rabeen pointed out... The issue is with your AS number... Also I guess there are some RR license issues..IS-IS Sleeps.
BGP peers are quiet.
Something must be wrong. -
hoogen82 Member Posts: 272Don't be hard on yourself for not picking up the information correctly... Most of us did the same thing...I mean I had the same fault when I did this lab..IS-IS Sleeps.
BGP peers are quiet.
Something must be wrong. -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□you local as is 65412, and you prepend 65412!!
this is the problem.
you should prepend 64512 64512
Guess you are going to take the JNCIP exam next week BJ?
wow good catch...these look so close..i will change it and see and test...thanks
who's BJ btw? -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□Don't be hard on yourself for not picking up the information correctly... Most of us did the same thing...I mean I had the same fault when I did this lab..
thanks hoogen...this forum is awesome.. -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□changed to correct AS and it works now..RR license is just a warning...at least in 8.x junos..i had 9.5 loaded and it would bring the neighbor up because of the license..
thanks guys -
RabeenZhu Member Posts: 16 ■□□□□□□□□□wow good catch...these look so close..i will change it and see and test...thanks
who's BJ btw?
Oh, since you are asking questions a lot recently, I thought you are going to take the lab next week. and the next week lab is held in Beijing China^^^^ -
IOS2JUNOS Member Posts: 56 ■■□□□□□□□□Oh, since you are asking questions a lot recently, I thought you are going to take the lab next week. and the next week lab is held in Beijing China^^^^
i'm looking to take it sometime next month...in sunnyvale though -
abdullahbaheer Registered Users Posts: 1 ■□□□□□□□□□This got me so puzzled,
Good Catch Indeed...
I saw it in this thread, and got registered to the site just to say:
THANK YOU
I am appearing in the exam on 3rd of April 2011
wish me luck -
APA Member Posts: 959Am I missing the point of this lab here?
Why would AS 65412 prepend 64512 to a route receive from AS 1492 - you should be prepending your AS to a route not a completely different AS number....
Otherwise you could have just configured something to the equivalence of ´allow-as in´ to achieve the same outcome without the bogus AS prepend...
CCNA | CCNA:Security | CCNP | CCIP
JNCIA:JUNOS | JNCIA:EX | JNCIS:ENT | JNCIS:SEC
JNCIS:SP | JNCIP:SP