Okay, it seams that I figured out something quiet important.

So on my bond0 (which is the uplink to the firewall vlan) on the bird bgp box I have a.b.c.249/29 configured. My first fw has a.b.c.252/29 second fw .53/29 and CARP VIP is .54/29. Now I dont have to route a b.c.0/22 to my transfer net ip... I have to route it to my firewall ip or even better of course to my carp vip. Now I see all traffic coming to the fw cluster :)

Now the only issue left is the sync between my two bgp boxes...

Maybe someone could point me in the right direction :)

I have two bird bgp pizzas a.b.c.249/29 and .250/29 so I think I just make a new bgp link between them?

Thanks for your help

Best Regards
Yves
From: mail@yvesilli.com
Sent: 21 May 2019 13:08
To: santiago@crfreenet.org
Cc: bird-users@network.cz
Subject: AW: Simple two bird BGPs two Uplinks one Peering Provider config

Hi,

Okay, I think there is a misunderstanding. Or maybe I am totally wrong. Please correct me if I am.

a.b.c.0/22 is my range

d.e.f.124 is my bgp01 public ip of the /29 transfer net between my bgp01 and the big router (d.e.f.121/29) of my peering uplink

So if I want to advertise my own public ips (a.b.c.0/22) to my peering uplink (so called to the internet) shouldn't I make it like this:

protocol static static_bgp {
  ipv4;
  route a.b.c.0/22 via d.e.f.124;
}
protocol bgp link1 {
  local d.e.f.124 as XXXX;
  neighbor d.e.f.121 as YYYY; #d.e.f.121 is the first router of my peering uplink 1
  ipv4 { import all;export where proto = "static_bgp"; };
}

I want to import all from them so I know the internet and how to route.... and I want to export stat-ic_bgp so the internet know's me?

Thanks for your help
Yves

-----Ursprüngliche Nachricht-----
Von: Ondrej Zajicek <santiago@crfreenet.org>
Gesendet: Montag, 20. Mai 2019 20:43
An: Yves Illi <mail@yvesilli.com>
Cc: bird-users@network.cz
Betreff: Re: Simple two bird BGPs two Uplinks one Peering Provider config

On Mon, May 20, 2019 at 05:17:08PM +0000, Yves Illi wrote:
> Hi there,
>
> I am really new to the complete topic of BGP. So please have a bit mercy with me if I ask something very stupid. But I am trying to build that for the first time ever and I am feeling like a donkey in front of a big mountain.
>
> Last but not least it is currently running, but I guess its more luck than something else. Like I said I am completely new to the topic of BGP. What I don't get is how I configure them together so they work (as a HA-Cluster) and currently I can only route a.b.c.249/29 instead of a.b.c.0/22.

Hi

> protocol static static_bgp {
>   ipv4;
>   route a.b.c.0/22 via d.e.f.124;
> }

I think this is the problem, as d.e.f.124 is your local address, then this route is probably not allowed locally (because you should not have route directing to a local address) and therefore likely not propagated to BGP.

Simple solution is to have the static route defined as unreachable route:

  route a.b.c.0/22 unreachable;

You would have more specific routes in the routing table anyways and when the unreachable route is propagated by BGP, the local address will be attached as next hop automatically.

--
Elen sila lumenn' omentielvo

Ondrej 'Santiago' Zajicek (email: santiago@crfreenet.org) OpenPGP encrypted e-mails preferred (KeyID 0x11DEADC3, wwwkeys.pgp.net) "To err is human -- to blame it on a computer is even more so."