BGP MPLS ATT

Similar Questions

• Integrate the new routers BGP network Nexus 5 K

  Hello

  I'm having a little trouble wrapping my head around how to do it.  We have an existing network that consists of Nexus 5 K in the data center.  We are now trying to design and implement a new site in the new network.

  I have attached a diagram of the network in question segment.

  To simplify the management of roads, we want to integrate the new routers in BGP network (both routers 2900 are new).  What I'm having lot to grasp, is how to intigrate the new existing network from the network.

  In a lab, I am only able to implement the VRF, BGP using RD & RT scenario.  From my understanding and correct me if I'm wrong, if I use RD and RT. on the 2900 s I would need the same configuration on the Nexus for traffic.  Under normal circumstances I might just add RDs and RTs to the N5K but then I also need to go to all other locations and configure them as well.

  I would be grateful for comments on how I can integrate these new routers with the existing network and maintain routing Dynamics using BGP.

  Thank you

  If all inter the VRF routing is handled by the firewall, then your installation program can be quite simple.  You probably don't want BGP/MPLS on the dark - fiber link

  lets say it was a vlan per VRF.

  (1) If you can import/export routes on the 2911 on the main site of each VRF see other VRF routes. If you want to only route through the firewall there is not need to do. In fact, as far as I can see that you want to import and export routes, you simply use subinterfaces on the firewall to control the flow of traffic.

  The way to completely isolate the traffic is-

  (1) extend the VRF all the way from the main site to the remote site. Do you this by creating some subinterfaces on dark fiber between the 2900 connections s and then place each subinterface in the corresponding VRF.

  (2) on each LAN interface facing the 2900 s you again create the same subinterfaces and assign in the corresponding VRF.

  (3) to each LAN interface run you a trunk to the switch. (Not sure what you have on the remote site). In the primary site of this trunk would go to the Nexus switch and there would then be a trunk of the Nexus switch to the firewall. If it were a vlan by VRF there was no need of lass on the Nexus switch.

  By VRF you can then run a protocol for routing if necessary for example. EIGRP or OSPF.

  With the above, the only way for any device in a particular VRF to communicate with any other device is via a firewall interface. There is no import and export from any road. Are not in the VRF subinterfaces on the firewall and the firewall has a global routing table that contains all the routes each VRF and you strictly control access with a stateful filtering.

  If you could not use subinterfaces on dark fiber connections, you can always watch GRE tunnnels.

  The foregoing assumes that it is a vlan per VRF. If several VLANs, so there is a need of lass on the Nexus if routing between VLANS in the same VRF could be done. It is the same on a remote site.

  If you do not run BGP to import and export on the 2900 s then you then trade routes between VRF. If the default gateway of customers has been set on the firewall then you should always get separation but if the customer has changed the door of the subinterface 2900 for example then this device would have within each VRF to VRF other routes.

  So, based on what you described I do not see the need for any import/export routes.

  Does make sense?

  Jon

• CHRC & CCNP Certifications SP

  Hello

  I achieve CCNP R & S. Can I candidate for CCDP without CCDA and CCNP SP without CCNA SP.

  Thank you in advance!

  1. "I can CCDP without CCGD candidate."

  You can take the exam of the CHRC, but you need to "valid Cisco Routing and switching CCNA and CCDA or any Cisco CCIE certification can act as a sine qua non."  before you get the certification of the CHRC. Reference source

  2. "CCNP SP without CCNA SP." Similarly, you can pass the exam but will not be certified until the prerequisites first. CCNP SP those are:

  • Valid Cisco CCNA Service Provider, or
  • Valid Cisco CCNA routing and switching of more have passed a minimum of 1 examination of the CCIP (QOS, BGP, MPLS, BGP + MPLS, ROAD, OIOS), or
  • Valid Cisco of the DAC, or
  • All Cisco CCIE certification

  Reference source.

• DVTI

  Hello

  I don't understand why I can't connect to DVTI. I made the simplest configuration to connect VPN between ASIT and DVTI and it works no-someone ' could you please explain what this is?

  I have the router (IP 1.1.1.1) R1 and R2 (IP 2.2.2.1) router

  Configuration of R1:

  crypto ISAKMP policy 10

  BA aes 192

  preshared authentication

  Group 5

  key encryption isakmp address 0.0.0.0 0.0.0.0

  Crypto ipsec transform-set set2 ah-sha-hmac

  Crypto ipsec profile vi

  Set transform-set set2

  interface Tunnel0

  172.16.0.1 IP address 255.255.255.0

  source of tunnel Serial0/0

  tunnel destination 2.2.2.1

  ipv4 ipsec tunnel mode

  Profile of protection vi ipsec tunnel

  interface Serial0/0

  IP 1.1.1.1 255.255.255.252

  IP route 0.0.0.0 0.0.0.0 Serial0/0 10

  Configuration of R2:

  crypto ISAKMP policy 10

  BA aes 192

  preshared authentication

  Group 5

  key encryption isakmp address 0.0.0.0 0.0.0.0

  Crypto isakmp vi profile

  default keychain

  function identity address 0.0.0.0

  virtual-model 2

  Crypto ipsec transform-set set2 ah-sha-hmac

  Crypto ipsec profile vi

  Set transform-set set2

  the vi isakmp profile value

  interface Loopback0

  172.16.0.2 IP address 255.255.255.0

  interface Serial0/0

  IP 2.2.2.1 255.255.255.252

  tunnel type of interface virtual-Template2

  IP unnumbered Loopback0

  ipv4 ipsec tunnel mode

  Profile of protection vi ipsec tunnel

  IP route 0.0.0.0 0.0.0.0 Serial0/0 10

  ASIT tunnel rises, virtaul-access Interface arrives also and as a result of configuration:

  interface virtual-Access2
  MTU 1514
  IP unnumbered Loopback0
  tunnel source 2.2.2.1
  tunnel destination 1.1.1.1
  ipv4 ipsec tunnel mode
  Profile of protection vi ipsec tunnel

  No ipsec tunnel protection initiate
  end

  R2 receives all R1 IPsec traffic, but there is no response from R2. The only point that I see it, is that R2 na not create a reverse route to R1.

  THX

  Dmytro,

  Somrthing like this works for me:

  DVTI:

  Peering2_961 #sh run virtual int-model 1
  Building configuration...

  Current configuration: 158 bytes
  !
  type of interface virtual-Template1 tunnel
  IP unnumbered Loopback0
  source of tunnel Serial0/0
  ipv4 ipsec tunnel mode
  Tunnel PRO ipsec protection profile
  end

  Peering2_961 # run HS | s crypto
  Crypto pki token removal timeout default 0
  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 2
  address of cisco key crypto isakmp 0.0.0.0 0.0.0.0
  ISAKMP crypto PRO profile
  default keychain
  function identity address 0.0.0.0
  virtual-model 1
  Crypto ipsec transform-set TRA aes - esp esp-sha-hmac
  Crypto ipsec profile PRO
  game of transformation-TRA
  Set PRO isakmp-profile
  Peering2_961 #sh passage int se0/0
  Building configuration...

  Current configuration: 178 bytes
  !
  interface Serial0/0
  IP 172.16.0.2 255.255.255.252
  IPv6 2001:DB8:BB:2 address / 126
  transfer of bgp MPLS
  MPLS protocol ldp label
  MPLS ip
  series 0 restart delay
  end

  Peering2_961 #sh run int l0
  Building configuration...

  Current configuration: 69 bytes
  !
  interface Loopback0
  223.255.255.1 the IP 255.255.255.255
  end

  Peering2_961 # run HS | s r r
  Peering2_961 # run HS | s r RIP
  router RIP
  version 2
  network 11.0.0.0
  network 223.255.255.0
  No Auto-resume

  ASIT:

  Peering1_960 # run HS | s crypto
  Crypto pki token removal timeout default 0
  crypto ISAKMP policy 10
  BA aes
  preshared authentication
  Group 2
  address of cisco key crypto isakmp 0.0.0.0 0.0.0.0
  Crypto ipsec transform-set TRA aes - esp esp-sha-hmac
  Crypto ipsec profile PRO
  game of transformation-TRA
  Peering1_960 #sh run int tu0
  Building configuration...

  Current configuration: 167 bytes
  !
  interface Tunnel0
  IP unnumbered Loopback0
  source of tunnel Serial0/0
  ipv4 ipsec tunnel mode
  tunnel destination 172.16.0.2
  Tunnel PRO ipsec protection profile
  end

  Routing on DVTI:

  Peering2_961 #sh ip route
  (... omitted...)

  11.0.0.0/8 is variably divided into subnets, 3 subnets, 2 masks
  R 11.0.0.0/24 [120/1] via 223.255.255.0, 00:00:12, Access2-virtual
  C 11.1.1.0/24 is directly connected, Loopback100
  L 11.1.1.1/32 is directly connected, Loopback100
  172.16.0.0/16 is variably divided into subnets, 2 subnets, 2 masks
  C 172.16.0.0/30 is directly connected, Serial0/0
  The 172.16.0.2/32 is directly connected, Serial0/0
  223.255.255.0/32 is divided into subnets, 2 subnets
  R 223.255.255.0 [120/1] via 223.255.255.0, 00:00:12, Access2-virtual
  C 223.255.255.1 is directly connected, Loopback0

  Ping test:

  Peering2_961 #sh crypto ipsec his | I have caps | ident
  local ident (addr, mask, prot, port): (0.0.0.0/0.0.0.0/0/0)
  Remote ident (addr, mask, prot, port): (0.0.0.0/0.0.0.0/0/0)
  #pkts program: 41, #pkts encrypt: 41, #pkts digest: 41
  #pkts decaps: 33, #pkts decrypt: 33, #pkts check: 33
  Peering2_961 #ping 223.255.255.0 re 1000

  Type to abort escape sequence.
  Sending of 1000, 100-byte ICMP echoes to 223.255.255.0, time-out is 2 seconds:
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
  !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!.
  Success rate is 99 percent (525/526), round-trip min/avg/max = 20/36/52 ms
  Peering2_961 #sh crypto ipsec his | I have caps | ident
  local ident (addr, mask, prot, port): (0.0.0.0/0.0.0.0/0/0)
  Remote ident (addr, mask, prot, port): (0.0.0.0/0.0.0.0/0/0)
  #pkts program: 569, #pkts encrypt: 569, #pkts digest: 569
  #pkts decaps: 561, #pkts decrypt: 561, #pkts check: 561

• IOS XR MPLS VPN L3 + BGP error message

  I use the file "iosxrv-k9-demo - 5.1.2" image on GNS3 for free practice.

  When my IOS XR with MPLS L3 VPN router and assigning an interface of IOS XR to a VRF, it gives an error:

  RP/0/0 / CPU0:Feb 19 20:16:50.182: bgp [1048]: ROUTING-BGP-3-RPC_SET_ERROR %: [22]: read all RPC operation: Table. Error: ' Subsystem (3373) "detected the status of 'fatal', 'Code (37)': pkg/bin/PMO: (PID = 663826):-traceback = b395988 b229e9c 8226a4b 8224bdc afb2e7c b22d857 8267050.

  looking for a solution.

  Hi umesh, there is a table operation handler problem that has been fixed in xr 513. When the list is empty, it returns "error", but which is not necessary to return the error, an empty list can be ok, so the sw fix that went in is to check that and return errors more detailed codes inside the s in this case table operations and PMO communition XR (which is made via RPC or remote call procedure).

  few options who may be here to try:

  -1 ignore it and continue the configuration

  -2 set all definitions of vrf first under router bgp and everywhere where necessary before you assign it to an interface

  -3 clear config, reboot, apply the new configuration step by step with the first definitions of vrf and last to apply to the interface.

  -4 Download xr513 XRv.

  see you soon

  Xander

• MPLS L3VPN BGP AS number

  Hello

  I use "Cisco IOS Cookbook" from O'Reilly.

  In his example, MPLS L3VPN, it assigns 'BGP 100' (a public number) for routers in the MPLS cloud and private AS numbers to routers of THIS.

  I want to follow this example for readability in a real project, but I was wondering if I should use a private AS number instead. (for PE routers.)

  Our Organization is not a public number yet. Even if we have, I think that we will have a new router dedicated to public internet EXCHANGE.

  So I'll be fine if I use 'BGP 100' on our PE routers?

  Thank you

  -Andrew

  Andrew,

  I'm curious to know what kind of example you follow, but I can say this, to the same ASN BGP sessions are considered the iBGP connections, connections to an another BGP ASN BGP will be considered eBGP connection.  So if you have a 'true' ASN assigned you will have likely to reconfigure you iBGP connections.  There may be a workaround as the "local" solution - as

  ASN100 really exists on the internet, so I advise against the use of 100.

  -Tim

• MPLS BGP route push DMVPN rays

  I have an MPLS with BGP. I have sites that are not connected directly to the SPLM, also, but need a VPN s2s hub sites that are connected to the SPLM and in this way they access resources MPLS. I need to communicate the changes to itinerary for the SPLM when the DMVPN fails on another hub.

  Currently, this is my config:

  Datacenter (MPLS only)

   interface GigabitEthernet0/1 description MPLS ip address 192.168.0.34 255.255.255.252 interface Vlan2 ip address 192.168.96.2 255.255.255.0 router bgp 65511 bgp log-neighbor-changes network 192.168.96.0 neighbor 192.168.0.33 remote-as 65510

  Hub site 1 (MPLS + internet)

   interface Tunnel200 ip address 10.99.99.1 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication auth ip nhrp map multicast dynamic ip nhrp network-id 12345 ip nhrp holdtime 600 tunnel source GigabitEthernet0/0 tunnel mode gre multipoint tunnel key 200 tunnel protection ipsec profile dmvpn interface GigabitEthernet0/1 description MPLS ip address 192.168.1.2 255.255.255.0 secondary ip address 192.168.0.2 255.255.255.252 router bgp 65001 bgp log-neighbor-changes network 192.168.1.0 network 192.168.21.0 !10.99 clients are DMVPN spokes neighbor 10.99.99.3 remote-as 99010 neighbor 10.99.99.3 route-reflector-client neighbor 10.99.99.21 remote-as 99001 neighbor 10.99.99.21 route-reflector-client !as 65000 is the MPLS PE neighbor 192.168.0.1 remote-as 65000

  Hub 2 site, has the same configuration, except for the local ip address and the router BGP ID.

  Spoke site:

   interface Tunnel200 ip address 10.99.99.3 255.255.255.0 no ip redirects ip mtu 1400 ip nhrp authentication auth ip nhrp map 10.99.99.1 PUBLIC_IP_HUB_1 ip nhrp map 10.99.99.16 PUBLIC_IP_HUB_2 ip nhrp network-id 12345 ip nhrp holdtime 600 ip nhrp nhs 10.99.99.1 priority 1 ip nhrp nhs 10.99.99.16 priority 5 ip nhrp nhs fallback 60 tunnel source GigabitEthernet0/0 tunnel mode gre multipoint tunnel key 200 tunnel protection ipsec profile dmvpn interface GigabitEthernet0/1 description Internal ip address 192.168.3.1 255.255.255.192 router bgp 99010 bgp log-neighbor-changes network 192.168.3.0 neighbor 10.99.99.1 remote-as 65001 neighbor 10.99.99.16 remote-as 65013

  This site speaks

   #sh ip route B 192.168.1.0/24 [20/0] via 10.99.99.1, 00:47:01

  which is the network of HUBS, but the rest of the MPLS roads are not "learned".

  What Miss me?

  Thank you!

  192.168.21.0 is another spoke, sorry for Terseco not that. Same configuration as the op 192.168.3.0. So I make a record of the domain controller and it will the first hub and not backup

  The difference is that your hubs are advertising the subnet 192.168.21.0/24 IE. you have configured it as a statement of network under your BGP configuration on the hubs and not the rays where this subnet is actually which brings me to my next point.

  The hub will switch to backup when I mannualy closed the internet interface, but not the entire router. This could be a problem?

  Yes because the Hub 1 site still has its MPLS connection until 192.168.21.0/24 advertising to the domain controller is.

  If this subnet was announced by speak it that it belonged and not the hubs then it should be announced only by hub site 2 because the Hub 1 site is more would receive it on the site talks about.

  So why are advertising a route speaks on hubs instead of reception by spoke them and transmit to the MPLS network?

  Edit - for this subnet to advertise you must have a route in the IP routing for her table.  How are getting you this route in the routing table, it with a route static and if yes, what is the exact route you entered?

  Jon

• BGP configuration

  Hi all

  Please can someone help me understand this concept...

  Let me show you the scenario

  a single MPLS of ISP connection come to my router and my router in the DMZ servers

  I have to connect to the remote server to my server DMZ

  The ISP gave me the details of BGP configure

  now what do I Route my private network for remote servers...

  I run NAT on my router to go through the ISP connection... now I can ping to the gateway of the ISP and can see all the router in table bgp #sh

  is this correct or I need to directly transfer traffic from the internal network of ISP through BGP... or

  Do I have to create Tunnels... If the Tunnels are necessary then I need to know the remote desktop

  

  Thank you very much in advance

  You have 1 site that has a circuit of mpls and the other doesn't, or go in the same provider and SPLM on both sides? If you have mpls on both sides by the same provider, it should be as easy as peering with the supplier with bgp on both sides and advertising then your internal subnets. If you have the public internet between you, you will need tunnels of lan-to-lan creat between two routers. Here is a guide to help you to do:

  http://www.Cisco.com/en/us/Tech/tk583/TK372/technologies_configuration_example09186a0080094634.shtml

  HTH,
  John

  Please note all useful messages *.

• DMVPN BGP and EIGRP

  I am in the initial phase of research DMVPN.  We currently have an MPLS network running BGP.  Each site has Internet at home as well as a VPN site-to-site is built on the router and talks to an ASA when the SPLM fails.

  I want to implement DMVPN to do away with the site to site VPN and ASA.  I'm going to run EIGRP on routers to connect DMVPN.  Are there any good whitepapers on BGP as the main path and by EIGRP on the DMVPN as a backup?  Or no focus on a general config?

  Thank you

  It's really the main issue.

  With your configuration DMVPN roads will be internal EIGRP of an advertisement of 90, so your default DC prefer DMVPN on MPLS, which is exactly what you don't want.

  There are several ways around this as summarizing through DMPVN, redistribution connected on the sites of the branch in EIGRP so roads DMVPN are external as well and then changing measures etc.

  The other alternative I have ever done so it's for your information is really Cisco have what is called a solution IWAN where DMVPN is performed everywhere that is, even through the MPLS network.

  That would solve your problem of external routes internal EIGRP but IWAN vs is much more than just that, even if you do not need necessarily to implement the entire solution at a time.

  I just thought that it should be mentioned, and if you want more information on this I can direct you to the design guide.

  Jon

• Numbers of BGP AFI/SAFI

  Hi guys,.

  I am currently studying for my exam 642-611 MPLS and I was wandering if someone could point me to a repository for numbers of BGP AFI/SAFI.

  Specifically, what are the numbers of the AFI for VPNv4 and VPNv6 addresses?

  Thank you

  Concerning

  Scott

  Scott,

  Here is the link to the list maintained by the Internet Assigned Numbers Authority IANA)

  Address family identifier (AFI)

  http://www.IANA.org/assignments/address-family-numbers/address-family-numbers.XHTML

  Identifier (SAFI) subsequent address family

  http://www.IANA.org/assignments/Safi-namespace

  Concerning

• Metric IGP into BGP MED copied.

  Hi all

  I have a problem of BGP that inherits from my IGP metric value in its attribute MED. I have an EBGP peering with my client. I send only specific to my counterpart ebgp routers using network commands in BGP.i receive the prefixes by ospf in my table.i itinerary not to redistribute these routes to bgp, but network command allows to advertise in BGP.

  My question is when these prefixes are to be sent to my EBGP peer, he takes the metric value of the IGP and fasten it as value MED. This is an impact on the choice of the route of my client which is in a MPLS cloud. Is this a normal behavior... or how to stop the BGP will send this MED value.

  Kind regards

  Jean-Pierre

  Discovering that you send to an eBGP neighbor, drugs even if you never wanted, can be a surprise, but it happens. If the injected into BGP route (either using 'network' or 'redistribute' order) comes from an IGP, MED is derived from the IGP metric, and the road was announced to a neighboring eBGP with this med. Guiseppe has already provided a solution for your problem. Another option is to inject routes into BGP using the command 'aggregate-address', in which case MED is not defined. Personally, I prefer the configuration command "network" combined with the solution that Giuseppe suggested.

• BGP removing the best path

  Hello.

  I have a problem where the best path to a particular destination is removed by BGP.

  To explain.

  Site A has 2 links to site B. 1 via a peer eBGP on MPLS, 2 via an iBGP during a backup VPN peer.

  I configured the ebgp with a higher weight counterpart so that it is preferred.

  The problem is the following.

  When the ebgp peer link goes down, the connection via the ibgp peer is preferred.

  When the link via the ebgp peer returns to the top, the path of the ebgp peer doesn't come back in the BGP table (in fact it dates back to a second and is then removed).

  Could someone help me on this one.

  Thank you

  Lee

  It would go something like this:

  Country:

  router bgp 65500

  nearby MPLS map route setMed out

  setMed allowed 10 route map

  corresponds to the ip address 1

  set 2 med

  setMed allowed 20 route map

  med game 1

  permit access-list 1

  RtrC:

  router bgp 65500

  nearby MPLS map route setMed out

  setMed allowed 10 route map

  corresponds to the ip address 1

  set 2 med

  setMed allowed 20 route map

  med game 1

  permit access-list 1

  Let me know if you have any questions,

• BGP path selection

  Hello

  in my bgp table, I have two paths to the defaultroute:

  65052:420:0.0.0.0/0, version 4803 BGP routing table entry

  Paths: (2 available, excellent #2, table vkb)

  Not announced in any position

  Local

  172.16.24.2 (98 metric) of 172.16.24.2 (172.16.24.62)

  Incomplete 755968, metrics, localpref 100 original, valid, internal

  Community: RT:65052:420 0 x 8800: 0:8212 0 x 8801: 100:131072 0 x 8802: 65283:624896 0 x 8803: 65281:1500 0 x 8804: 0:2886794964 0 x 8805: 3:0,.

  label MPLS/exit nolabel/1602

  Local

  172.16.24.1 (99 metric) of 172.16.24.1 (172.16.24.61)

  Incomplete metric, original 755712, localpref 100, valid, internal, best

  Community: RT:65052:420 0 x 8800: 0:8211 0 x 8801: 100:130816 0 x 8802: 65282:624896 0 x 8803: 65299:1500 0 x 8804: 0:2886794963 0 x 8805: 3:0,.

  label MPLS/exit nolabel/1410

  Why is the way to selected 172.16.24.1 even if the igp metric to 172.16.24.2 is 98 and 172.16.24.1 is 99!

  so the way to 172.16.24.2 is better (98).

  I am a redistribution of eigrp to the mpls backbone

  thx for the answer

  Hello

  MED for the preferred route is lower than the other. MED is regarded as to the cost of the IGP for the advertising router.

  HTH.

  -Rob

• BGP-advertising

  Dear all,

  I have a simple test facility. with MPLS and L3vpn top. I want to the CE router to not see the FAI AS in roads announce another CE router in vrf even connected to another PE router

  How can I block the public from the ISP to the advertising in the BGP updates for routers of THIS. The CE router should see from the other CE router.

  Topology is attached. I want to CPE-1 see only AS 1 in the PMO and not AS4000 update as

  AS-path path

  4000 1 4.4.4.4/32

  but I want to hide AS 4000 so something like this

  1 1 4.4.4.4/32

  Hello - if it's a laboratory facility I would suggest a test using the NEIGHBORHOOD LOCAL-AS. This must be configured in router ISP PE-2.

  PE2(config-t) x.x. #neighbor. x.x local-2

  Please let me know if it works. Thank you

  Best regards / SAIRAM

• BGP, OSPF with default route

  Hello

  My branch becomes internet through seat & connected through lease line and ospf is running. a static route id 0.0.0.0 set to HO.

  Now an additional link is added to our extensive network of MPLS link redundancy & EBGP is running.

  My question is how to configure ospf route (my internal network) to bgp & default (for internet) route for connectivity?

  Please help with examples.

  Thank you

  For the internet, you need a default route. I am assuming that you will get by default route of MPLS as well so leased will remain DEFAULT road get MPLS BGp inject into LAN by this command that I already added to your config file.

  router ospf xxx

  default information are created

  !

  Also if you connect line Lased and MPLS on the same router then router chooses MPLS as the main path as favorite eBGP and ospf. If you ave to change AD BGP routes to ospf will get better than BGP. Use in config for leased line primary and secondary MLP.

  router bgp xxx

  BGP distance 200 200 200

  !