<div dir="auto">hi Yves,<div dir="auto"><br></div><div dir="auto">you need indeed a bgp in netwerk or put an additional route reflector of you are planning additional connections in the future and want to scale.</div><div dir="auto"><br></div><div dir="auto">kurt</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">Op za 25 mei 2019 10:06 schreef Yves Illi <<a href="mailto:mail@yvesilli.com">mail@yvesilli.com</a>>:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="background-color:rgb(255,255,255);line-height:initial">
<div id="m_-2687961667063991483x_response_container_BBPPID" dir="auto" style="outline:none">
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Okay, it seams that I figured out something quiet important.</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
So on my bond0 (which is the uplink to the firewall vlan) on the bird bgp box I have a.b.c.249/29 configured. My first fw has a.b.c.252/29 second fw .53/29 and CARP VIP is .54/29. Now I dont have to route a b.c.0/22 to my transfer net ip... I have to route
it to my firewall ip or even better of course to my carp vip. Now I see all traffic coming to the fw cluster :)</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Now the only issue left is the sync between my two bgp boxes...</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Maybe someone could point me in the right direction :)</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
I have two bird bgp pizzas a.b.c.249/29 and .250/29 so I think I just make a new bgp link between them?</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Thanks for your help</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
<br>
</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Best Regards</div>
<div name="x_BB10" id="m_-2687961667063991483x_BB10_response_div_BBPPID" dir="auto" style="width:100%">
Yves</div>
</div>
<div id="m_-2687961667063991483x__original_msg_header_BBPPID" dir="auto">
<table width="100%" style="background-color:white;border-spacing:0px;display:table;outline:none">
<tbody>
<tr>
<td colspan="2" style="padding:initial;font-size:initial;text-align:initial;background-color:rgb(255,255,255)">
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(181,196,223);padding:3pt 0in 0in;font-family:Tahoma,"BB Alpha Sans","Slate Pro";font-size:10pt">
<div id="m_-2687961667063991483x_from"><b>From:</b> <a href="mailto:mail@yvesilli.com" target="_blank" rel="noreferrer">mail@yvesilli.com</a></div>
<div id="m_-2687961667063991483x_sent"><b>Sent:</b> 21 May 2019 13:08</div>
<div id="m_-2687961667063991483x_to"><b>To:</b> <a href="mailto:santiago@crfreenet.org" target="_blank" rel="noreferrer">santiago@crfreenet.org</a></div>
<div id="m_-2687961667063991483x_cc"><b>Cc:</b> <a href="mailto:bird-users@network.cz" target="_blank" rel="noreferrer">bird-users@network.cz</a></div>
<div id="m_-2687961667063991483x_subject"><b>Subject:</b> AW: Simple two bird BGPs two Uplinks one Peering Provider config</div>
</div>
</td>
</tr>
</tbody>
</table>
<br>
</div>
</div>
<font size="2"><span style="font-size:10pt">
<div class="m_-2687961667063991483PlainText">Hi,<br>
<br>
Okay, I think there is a misunderstanding. Or maybe I am totally wrong. Please correct me if I am.<br>
<br>
a.b.c.0/22 is my range<br>
<br>
d.e.f.124 is my bgp01 public ip of the /29 transfer net between my bgp01 and the big router (d.e.f.121/29) of my peering uplink<br>
<br>
So if I want to advertise my own public ips (a.b.c.0/22) to my peering uplink (so called to the internet) shouldn't I make it like this:<br>
<br>
protocol static static_bgp {<br>
ipv4;<br>
route a.b.c.0/22 via d.e.f.124;<br>
}<br>
protocol bgp link1 {<br>
local d.e.f.124 as XXXX;<br>
neighbor d.e.f.121 as YYYY; #d.e.f.121 is the first router of my peering uplink 1<br>
ipv4 { import all;export where proto = "static_bgp"; };<br>
}<br>
<br>
I want to import all from them so I know the internet and how to route.... and I want to export stat-ic_bgp so the internet know's me?<br>
<br>
Thanks for your help<br>
Yves<br>
<br>
-----Ursprüngliche Nachricht-----<br>
Von: Ondrej Zajicek <<a href="mailto:santiago@crfreenet.org" target="_blank" rel="noreferrer">santiago@crfreenet.org</a>> <br>
Gesendet: Montag, 20. Mai 2019 20:43<br>
An: Yves Illi <<a href="mailto:mail@yvesilli.com" target="_blank" rel="noreferrer">mail@yvesilli.com</a>><br>
Cc: <a href="mailto:bird-users@network.cz" target="_blank" rel="noreferrer">bird-users@network.cz</a><br>
Betreff: Re: Simple two bird BGPs two Uplinks one Peering Provider config<br>
<br>
On Mon, May 20, 2019 at 05:17:08PM +0000, Yves Illi wrote:<br>
> Hi there,<br>
> <br>
> I am really new to the complete topic of BGP. So please have a bit mercy with me if I ask something very stupid. But I am trying to build that for the first time ever and I am feeling like a donkey in front of a big mountain.<br>
> <br>
> Last but not least it is currently running, but I guess its more luck than something else. Like I said I am completely new to the topic of BGP. What I don't get is how I configure them together so they work (as a HA-Cluster) and currently I can only route
a.b.c.249/29 instead of a.b.c.0/22.<br>
<br>
Hi<br>
<br>
> protocol static static_bgp {<br>
> ipv4;<br>
> route a.b.c.0/22 via d.e.f.124;<br>
> }<br>
<br>
I think this is the problem, as d.e.f.124 is your local address, then this route is probably not allowed locally (because you should not have route directing to a local address) and therefore likely not propagated to BGP.<br>
<br>
Simple solution is to have the static route defined as unreachable route:<br>
<br>
route a.b.c.0/22 unreachable;<br>
<br>
You would have more specific routes in the routing table anyways and when the unreachable route is propagated by BGP, the local address will be attached as next hop automatically.<br>
<br>
--<br>
Elen sila lumenn' omentielvo<br>
<br>
Ondrej 'Santiago' Zajicek (email: <a href="mailto:santiago@crfreenet.org" target="_blank" rel="noreferrer">santiago@crfreenet.org</a>) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, <a href="http://wwwkeys.pgp.net" target="_blank" rel="noreferrer">wwwkeys.pgp.net</a>) "To err is human -- to blame it on a computer is even more so."<br>
<br>
</div>
</span></font>
</div>
</blockquote></div>