We have a BGP multihoming setup with same upstream provider and we are using 2 * routers for this setup at our end. We are recieving default routes from provider and advertising our prefixes to provider from both edge routers. Both edge routers are connected with firewalls and these firewalls are connected with 2* core switches. We had a problem yesterday after upgradation of OS of both firewalls that traffic from internet was reaching to servers from 1 internet link but on the other link it was dropping on router. This problem was nothing to do with firewall upgradation bcz traffic was reaching from other link. So I shuted down the bgp neighbor relationship with provider and then resume after a while. After this step traffic started coming from this router towards firewall as well. Kindly shed some light on this issue , what could be the possible issue ? it seems strange.
it is difficult to understand what happened without more details.
You say that the second router was dropping traffic coming from internet with destination your prefixes.
Have you configured on the edge router floating static routes pointing to Null0 (with an high AD) for your prefixes in order to have it announce always your prefixes ?
I guess you have also static routes for your prefixes via the firewall.
Could the firewall os upgrade change the MAC address on the NIC ? Unlikely but possible so this could be an ARP table issue: if at least 4 hours before restoration this is enough to time out ARP entry.
Have you configured any form of unicast RPF feature on the edge routers ?
And Have the two edge routers an iBGP session between them ?
I would suggest you to provide a filtered version of your edge routers config in order to enable further investigation
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...