We have a configuration with 2x 7200 connected to a 6509. The 2 7200's have our transit and peering points. The 6500 is our core switch.
We are trying to get iBGP from the 7200's to the 6500 with some filtering for only the 7200 connected ASN and their connected ASN routes on the 7200s being replicated down.
We had full routes going to the 6500 but saw a major CPU spike and it started causing issues with voice and other traffic.
Here is the existing config..
6500--OSPF--7200-1--BGP/OSPF--7200-2
/ \ / \
/ \ / \
/ \ x \
/ \ / \
Telia Savvis XO client-ASN
We want to do the following..
6500
/ \
/ \
/ iBGP \
/ \
7200-1 7200-2
/ \ / \
/ \ / \
/ BGP \ / BGP \
/ \ / \
Telia Savvis XO client-ASN
I tried the following from the 7200's and the 6500.. I didn't receive any routes via iBGP on the 6500.
6500
ip as-path access-list 85 permit ^OUR-AS_[0-9]*$
ip as-path access-list 85 deny .*
router bgp OUR-AS
no synchronization
bgp router-id 1.2.182.254
no bgp log-neighbor-changes
neighbor 1.2.182.118 remote-as OUR-AS
neighbor 1.2.182.118 description iBGP to 7200-2
neighbor 1.2.182.118 filter-list 85 in
neighbor 1.2.176.2 remote-as OUR-AS
neighbor 1.2.176.2 description iBGP to 7200-1
neighbor 1.2.176.2 filter-list 85 in
************************************************************
7200-1
ip as-path access-list 80 permit ^OUR-AS_[0-9]*$
ip as-path access-list 80 deny .*
router bgp OUR-AS
no synchronization
no bgp log-neighbor-changes
neighbor 1.2.176.5 remote-as OUR-AS
neighbor 1.2.176.5 description iBGP to 6500
neighbor 1.2.176.5 default-originate
neighbor 1.2.176.5 filter-list 80 out
************************************************************
7200-2
ip as-path access-list 80 permit ^OUR-AS_[0-9]*$
ip as-path access-list 80 deny .*
router bgp OUR-AS
no synchronization
no bgp log-neighbor-changes
neighbor 1.2.176.2 remote-as OUR-AS
neighbor 1.2.176.2 description iBGP to 6500
neighbor 1.2.176.2 filter-list 80 out
