cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1033
Views
0
Helpful
19
Replies

1 avpn cloud. 2 seperate External ip blocks. 2 seperate internet connections

Steve Coady
Level 1
Level 1

Hello

I have an AVPN cloud

My current sites have their own external IP subnet and an  centralized internet connection.

I am integrating sevetral new sites onto my avpn cloud.

The new sites have their own external ip subnet asnd a different centralized internet connection

Since we are all on 1 AVPN cloud, how do I force the new sites to use their centralized internet connection and not mine?

ip route 0.0.0.0 0.0.0.0 (WAN ip address of AVPN router that is located at site of their centralized internet connection)?

I would somehow need to direct throiugh the LAN side of the AVPN router so it could then be directed out their default gateway firewall?

sMc
19 Replies 19

Milan

The way the GRE tunnel is setup is as follows

5 sites using tunnel

Site 5 is the Internet link for the other 4.

Site 5 has (4) GRE tunnel interfaces. The tunnel int's look like

Site_5#

interface Tunnel3

description GRE2_Site_3

bandwidth 10000

ip address 10.254.0.13 255.255.255.252

ip mtu 1400

ip tcp adjust-mss 1360

tunnel source 172.16.41.1 - SIte_5 WAN ip

tunnel destination 172.16.43.1 Site_3 WAN ip

Site_3#

interface Tunnel0

description GRE2_Site_5

ip address 10.254.0.14 255.255.255.252

ip mtu 1400

ip tcp adjust-mss 1360

tunnel source 172.16.43.1 Site_3 WAN ip

tunnel destination 172.16.41.1 Site_5 WAN ip

ip route 0.0.0.0 0.0.0.0 10.254.0.13

Site_3#sh ip bgp sum

BGP router identifier 172.16.43.1, local AS number 64xxy

BGP table version is 67, main routing table version 67

49 network entries using 7252 bytes of memory

49 path entries using 3136 bytes of memory

8/8 BGP path/bestpath attribute entries using 1088 bytes of memory

7 BGP AS-PATH entries using 168 bytes of memory

1 BGP community entries using 24 bytes of memory

0 BGP route-map cache entries using 0 bytes of memory

0 BGP filter-list cache entries using 0 bytes of memory

BGP using 11668 total bytes of memory

BGP activity 146/97 prefixes, 156/107 paths, scan interval 60 secs

Neighbor        V           AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd

172.16.43.2     4        13979    5931    6495       67    0    0 4d02h          49

Site_3#

Site_3#sh ip bgp

BGP table version is 67, local router ID is 172.16.43.1

Status codes: s suppressed, d damped, h history, * valid, > best, i - internal,

              r RIB-failure, S Stale, m multipath, b backup-path, f RT-Filter,

              x best-external, a additional-path, c RIB-compressed,

Origin codes: i - IGP, e - EGP, ? - incomplete

RPKI validation codes: V valid, I invalid, N Not found

     Network          Next Hop            Metric LocPrf Weight Path

r>  0.0.0.0          172.16.43.2                            0 13979 64531 i

*>  10.40.50.0/24 - Site_4 LAN subnets   172.16.43.2        0 13979 64550 i

*>  10.40.51.0/24    172.16.43.2                            0 13979 64550 i

*>  10.40.52.0/24    172.16.43.2                            0 13979 64550 i

    MISSING         Site_1 LAN subnets

    MISSING         Site_2 LAN subnets

*>  10.44.40.0/24 - Site_5 LAN subnets   172.16.43.2        0 13979 64554 i

*>  10.44.41.0/24    172.16.43.2                            0 13979 64554 i

*>  10.44.42.0/24    172.16.43.2                            0 13979 64554 i

BGP Peer WAN ip

*>  172.16.40.0/30      Site_4       172.16.43.2 - Site_3 BGP Peer (PER router) 0 13979 ?

*>  172.16.40.12/30      Site_2      172.16.43.2                            0 13979 ?

*>  172.16.41.0/30     Site_5      172.16.43.2                            0 13979 ?

*>  172.16.42.4/30    Site_1       172.16.43.2                            0 13979 ?

r>  172.16.43.0/30    Site_3        172.16.43.2              0             0 13979 ?

Sites 1, 2 & 3 are not advertising via BGP. The tunnel is used when tracerouting to the other sites.

sMc

Hi Steve,

a) when your Site 3 is using the tunnel to reach the Internet through Site 5, how does the router on Site 5 forward the traffic returning from the Internet?

Is there a static route for Site 3 subnets configured with the Tunnel as next-hop?

Or is it just using the prefix received via BGP - an asymmetric routing used then though?

b) I suppose each site is using a different AS number?

c) Can you check on Site 1 by

sh ip bgp nei ... avd

if the router is advertising the LAN subnets correctly to the backbone?

Best regards,

Milan

Milan

Site 5 has a default route that points to an L3 switch directly connected off the AVPN router Gi0/0 interface. that L3 switch has a default route pointing to the firewall and the mout the internet.

The Site_3 router has statics for the LAN pointing into the L3 switch Vlan management int. The BGP is redistributing statics. The ISP has the default originate command in it's BGP statements.

Each site has it'sown AS#

Site_1#sh ip bgp nei

BGP neighbor is 172.16.42.6,  remote AS 13aba, external link

  BGP version 4, remote router ID 12.123.x.y

  BGP state = Established, up for 20:04:42

  Last read 00:00:08, last write 00:00:04, hold time is 180, keepalive interval is 60 seconds

  Neighbor sessions:

    1 active, is not multisession capable (disabled)

  Neighbor capabilities:

    Route refresh: advertised and received(new)

    Four-octets ASN Capability: advertised and received

    Address family IPv4 Unicast: advertised and received

    Graceful Restart Capability: received

      Remote Restart timer is 120 seconds

      Address families advertised by peer:

        IPv4 Unicast (was not preserved

    Enhanced Refresh Capability: advertised

    Multisession Capability:

    Stateful switchover support enabled: NO for session 1

  Message statistics:

    InQ depth is 0

    OutQ depth is 0

                         Sent       Rcvd

    Opens:                  1          1

    Notifications:          0          0

    Updates:                1         28

    Keepalives:          1327       1203

    Route Refresh:          0          0

    Total:               1329       1232

  Default minimum time between advertisement runs is 30 seconds

For address family: IPv4 Unicast

  Session: 172.16.42.6

  BGP table version 49, neighbor version 49/0

  Output queue size : 0

  Index 2, Advertise bit 0

  2 update-group member

  AF-dependant capabilities:

    Outbound Route Filter (ORF) type (128) Prefix-list:

      Receive-mode: received

  Incoming update network filter list is 10

  Slow-peer detection is disabled

  Slow-peer split-update-group dynamic is disabled

                                 Sent       Rcvd

  Prefix activity:               ----       ----

    Prefixes Current:               0         39 (Consumes 2496 bytes)

    Prefixes Total:                 0         43

    Implicit Withdraw:              0          0

    Explicit Withdraw:              0          4

    Used as bestpath:             n/a         39

    Used as multipath:            n/a          0

                                   Outbound    Inbound

  Local Policy Denied Prefixes:    --------    -------

    distribute-list                       0         63

    Bestpath from this peer:             44        n/a

    Invalid Path:                         4        n/a

    Total:                               48         63

  Number of NLRIs in the update sent: max 3, min 0

  Last detected as dynamic slow peer: never

  Dynamic slow peer recovered: never

  Refresh Epoch: 1

  Last Sent Refresh Start-of-rib: never

  Last Sent Refresh End-of-rib: never

  Last Received Refresh Start-of-rib: never

  Last Received Refresh End-of-rib: never

                                       Sent       Rcvd

        Refresh activity:              ----       ----

          Refresh Start-of-RIB          0          0

          Refresh End-of-RIB            0          0

  Address tracking is enabled, the RIB does have a route to 172.16.42.6

  Connections established 2; dropped 1

  Last reset 20:04:55, due to Peer closed the session

  Transport(tcp) path-mtu-discovery is enabled

  Graceful-Restart is disabled

Connection state is ESTAB, I/O status: 1, unread input bytes: 0

Connection is ECN Disabled, Mininum incoming TTL 0, Outgoing TTL 1

Local host: 172.16.42.5, Local port: 46193

Foreign host: 172.16.42.6, Foreign port: 179

Connection tableid (VRF): 0

Maximum output segment queue size: 50

Enqueued packets for retransmit: 0, input: 0  mis-ordered: 0 (0 bytes)

Event Timers (current time is 0x572BEEBC):

Timer          Starts    Wakeups            Next

Retrans          1330          1             0x0

TimeWait            0          0             0x0

AckHold          1212       1192             0x0

SendWnd             0          0             0x0

KeepAlive           0          0             0x0

GiveUp              0          0             0x0

PmtuAger        71078      71077      0x572BF02F

DeadWait            0          0             0x0

Linger              0          0             0x0

ProcessQ            0          0             0x0

iss:  355325512  snduna:  355350806  sndnxt:  355350806

irs: 2461159334  rcvnxt: 2461184009

sndwnd:  32407  scale:      0  maxrcvwnd:  16384

rcvwnd:  15206  scale:      0  delrcvwnd:   1178

SRTT: 1000 ms, RTTO: 1003 ms, RTV: 3 ms, KRTT: 0 ms

minRTT: 4 ms, maxRTT: 1000 ms, ACK hold: 200 ms

Status Flags: active open

Option Flags: nagle, path mtu capable

IP Precedence value : 6

Datagrams (max data segment is 1460 bytes):

Rcvd: 2537 (out of order: 0), with data: 1211, total data bytes: 24674

Sent: 2543 (retransmit: 1, fastretransmit: 0, partialack: 0, Second Congestion: 0), with data: 1329, total data bytes: 25293

Packets received in fast path: 0, fast processed: 0, slow path: 0

fast lock acquisition failures: 0, slow path: 0

TCP Semaphore      0x2311C6A0  FREE

Site_1#

router bgp 64xxa

no bgp log-neighbor-changes

network 10.42.20.0 mask 255.255.255.0

network 10.42.21.0 mask 255.255.255.0

network 10.42.22.0 mask 255.255.255.0

redistribute static

neighbor 172.16.42.6 remote-as 13aba

ip route 10.42.20.0 255.255.255.0 10.42.21.2 track 2

ip route 10.42.21.0 255.255.255.0 10.42.21.2 track 2

ip route 10.42.22.0 255.255.255.0 10.42.21.2 track 2

ip route 0.0.0.0 0.0.0.0 10.254.0.9

sMc

Hi Steve,

I don't fully understand your Site_1 configuration:

Is 10.42.21.0/24 directly connected?

Why are you using

redistribute static

and

network ...

command concurrently to get your static routes redistributed into BGP?

What are you tracking by track 2?

Is your provider configuring the CE router on your sites or are you configuring them?

In any case:

Your provider should be able to check if they are receiving the LAN prefixes from your Site_1

and if yes, if they are advertising them to your Site_3.

Best regards,

Milan

Milan

Issue appears to be resolved

The LAN int was down and consequently there was no route to the networks since BGP does not advertise the route, rather it permits the  route to be advertised when it is there.

sMc
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card