GLC Networks, profile picture
Uploaded byGLC Networks
PDF, PPTX202 views

BGP tuning: Peer with loopback

The document outlines a webinar on BGP tuning hosted by GLC Networks, covering topics such as BGP configuration, peer connections, and routing principles. The trainer, Achmad Mardiansyah, has extensive experience in network support and is a certified trainer. The agenda includes an introduction to BGP, practical exercises, and a Q&A session.

Embed presentation

Download as PDF, PPTX
www.glcnetworks.com BGP tuning: Peer with loopback GLC WEBINAR, 22 Dec 2022, 19:30 GMT+7 Achmad Mardiansyah achmad@glcnetworks.com GLC Networks, Indonesia
www.glcnetworks.com Agenda ● Introduction ● Review prerequisite knowledge ● BGP ● BGP peer with loopback ● Live practice ● Q & A 2
www.glcnetworks.com Introduction 3
www.glcnetworks.com What is GLC? ● Garda Lintas Cakrawala (www.glcnetworks.com) ● Based in Bandung, Indonesia ● Areas: Training, IT Consulting ● Certified partner for: Mikrotik, Ubiquity, Linux foundation ● Product: GLC radius manager ● Regular event 4
www.glcnetworks.com Trainer Introduction ● Name: Achmad Mardiansyah ● Base: bandung, Indonesia ● Linux user since 1999, mikrotik user since 2007, UBNT 2011 ● Mikrotik Certified Trainer (MTCNA/RE/WE/UME/INE/TCE/IPv6) ● Mikrotik/Linux Certified Consultant ● Website contributor: achmadjournal.com, mikrotik.tips, asysadmin.tips ● More info: http://au.linkedin.com/in/achmadmardiansyah 5
www.glcnetworks.com Past experience ● 2020-2022 (Congo DRC, PNG, Malaysia): network support, radius/billing integration ● 2019, Congo (DRC): build a wireless ISP from ground-up ● 2018, Malaysia: network revamp, develop billing solution and integration, setup dynamic routing ● 2017, Libya (north africa): remote wireless migration for a new Wireless ISP ● 2016, United Kingdom: workshop for wireless ISP, migrating a bridged to routed network ● 2015, Kalimantan, wireless support ● See our website for more details 6
www.glcnetworks.com Please introduce yourself ● Your name ● Your company/university? ● Your networking experience? ● Your mikrotik experience? ● Your expectation from this course? 7
www.glcnetworks.com Prerequisite This presentation some prerequisite knowledge ● We assume you already know: ○ TCP/IP ○ Mikrotik ○ Routing protocol ○ BGP 8
www.glcnetworks.com Review prerequisite knowledge 9
www.glcnetworks.com 7 OSI layer & protocol ● OSI layer Is a conceptual model from ISO (International Standard Organization) for project OSI (Open System Interconnection) ● When you send a message with a courier, you need to add more info to get your message arrived at the destination (This process is called encapsulation) ● What is protocol ○ Is a set of rules for communication ○ Available on each layer ● Communication consist of series encapsulation ○ SDU: service data unit (before PDU) ○ PDU: protocol data unit (after header is added) 10
www.glcnetworks.com Layered model (TCP/IP vs ISO) and encapsulation 11 / datagram
www.glcnetworks.com Did you notice? ● There is a big overhead on encapsulation process ● More encapsulation means less payload? 12
www.glcnetworks.com Router and Routing 13 ● Router is a network device that is used to forward packets, based on layer 3 information (layer 3 header) ● Routing is the process of selecting a path for traffic in a network, or between or across multiple networks Physical router Router icon
www.glcnetworks.com Typical connection (physical) 14 R2 R1 R3 ● Router connects layer 2 segments ● Router works on layer 3, connecting L2 segments ● Meaning, each layer 2 segment has network ID
www.glcnetworks.com Typical connection (logical) and routing table 15 Routing table: ● A table at router that is used to forward packet ● Available on every devices (router and host) ● Entry is executed sequentially 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 (default gw) 192.168.0.3
www.glcnetworks.com Forwarding packets using routing table 16 ● It works like a firewall: match and action ● When a packet arrived, routing table is used to forward packets ● You should think in binary to understand how it works destination gateway 192.168.16.3/32 11000000 10101000 00001000 00000011 192.168.0.2 192.168.0.0/26 11000000 10101000 00000000 00 direct 192.168.1.0/24 11000000 10101000 00000001 direct 192.168.2.0/24 11000000 10101000 00000010 192.168.0.2 192.168.3.0/24 11000000 10101000 00000011 192.168.0.3 0.0.0.0/0 (no match) 192.168.0.3
www.glcnetworks.com A packet arrived at R1… (example) 17 Destination IP address of the packet is 192.168.2.6, which gateway do we use? A: 192.168.2.6 = (11000000 10101000 00000010 00000110) destination gateway 192.168.16.3/32 11000000 10101000 00001000 00000011 192.168.0.2 192.168.0.0/26 11000000 10101000 00000000 00 direct 192.168.1.0/24 11000000 10101000 00000001 direct 192.168.2.0/24 11000000 10101000 00000010 192.168.0.2 192.168.3.0/24 11000000 10101000 00000011 192.168.0.3 0.0.0.0/0 192.168.0.3
www.glcnetworks.com Where routing table lookup happens? 18
www.glcnetworks.com How routing works & Administrative distance (analogy) 19 19 CITY 1 100 km CITY 2 120 km CITY 2 90 km CITY 3 500 km CITY 4 250 km 10.10.10.0/24 192.168.0.1 10 10.10.20.0/24 192.168.0.2 12 10.10.20.0/24 192.168.0.3 9 10.10.30.0/24 192.168.0.3 50 10.10.40.0/24 192.168.0.4 25
www.glcnetworks.com Administrative distance 20 ● Distance is considered when prefix length is same ● Lowest distance wins ● Administrative distance policy is depends on vendor ● Table on the right shows an example of administrative distance on cisco router
www.glcnetworks.com Static routing 21 ● Entries on routing table is created manually ● Admin must manage routing table in all routers ● Admin have full control 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 192.168.0.3
www.glcnetworks.com Dynamic routing 22 ● Router will talk to each other with routing protocol (RIP, OSPF, BGP) ● Entries on routing table is created automatically ● Admin must have a good knowledge about routing protocol 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 192.168.0.3
www.glcnetworks.com Routing metric ● is value used by a router to make routing decisions. It depends on routing protocols ● OSPF: accumulated cost ● RIP: hop count ● IS-IS: cost ● EIGRP: bandwidth, load, delay, reliability and MTU ● BGP: AS-Path, Next-hop, Origin, Local preference, Atomic aggregate, Multi Exit Discriminator (MED) 23
www.glcnetworks.com Asymmetric routing 24 ● Currently, routing is done one-way only ● Forwarding process on router is based on destination IP address ● There is no guarantee incoming path is similar to outgoing path ● We can only control outgoing forwarding R1 192.168.0.1/26 192.168.0.3/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24
www.glcnetworks.com BGP Border Gateway Protocol 25
www.glcnetworks.com ● Dynamic routing protocol, Path-vector ● Connecting AS numbers ● Each router need to create BGP-peer ○ Only receive and send routing prefix to peer ● At Layer 5 (session): use for BGP peer session ● At Layer 4 (transport): TCP port 179 ● Used by all routers in the internet ● Routes contents: ○ Full routes: all prefix in the internet ○ Partial routes: specific prefix Need to consider: ● Requires knowledge to operate ● More complex (compared to RIP), lots of options What is BGP? 26
www.glcnetworks.com ● A collection of Routers & Networks ● Under one administration (organisation, company, etc) ● Defined by AS number, given by IANA via RIR (APNIC, LACNIC, AFRINIC, ARIN, RIPE-NCC) ● We run BGP between AS ● Inside AS we run IGP (Interior gateway protocol): RIP, OSPF, IS-IS, EIGRP, etc Autonomous number (AS), IGP, BGP AS1 AS4 AS3 AS2 R1 27
www.glcnetworks.com HOW BGP works? BGP steps ● Each router must have router-id and AS number ● Each router must create BGP peer ● Setup BGP filter: ○ Inbound filter ○ Outbound filter ● Exchange routing tables between routers ● Send keep alive periodically 28
www.glcnetworks.com BGP attributes BGP metrics are called path attributes. Classifications: ● Well-known (all router must support) ○ Mandatory (must exist, in every update) ■ AS-Path ■ Next-hop ■ Origin ○ Discretionary (not always exist) ■ Local preference ■ Atomic aggregate ● Optional (some routers do not support) ○ Transitive (If not recognized, marked as partial and still propagated to neighbor) ■ Community ■ Aggregator ○ Non-Transitive (If not recognized, discard) ■ Multi Exit Discriminator (MED) 29
www.glcnetworks.com BGP best path selection algorithm 1. Router is ignoring received path if the route is not valid. Route is valid if: a. NEXT_HOP of the route is valid and reachable b. AS_PATH received from external peers does not contain the local AS c. route is not rejected by routing filters 2. The first path received is automatically considered 'best path'. Any further received paths are compared to first received to determine if the new path is better. 3. Prefer the path with the highest WEIGHT. a. WEIGHT parameter is local to the router on which it is configured. A route without assigned WEIGHT have a default value of 0. 4. Prefer the path with the highest LOCAL_PREF. It is used only within an AS. a. A path without LOCAL_PREF attribute have a value of 100 by default. 5. Prefer the path with the shortest AS_PATH. (skipped if ignore-as-path-len set to yes) a. Each AS_SET counts as 1, regardless of the set size. The AS_CONFED_SEQUENCE and AS_CONFED_SET are not included in the AS_PATH length. 6. Prefer the path that was locally originated via aggregate or BGP network 7. Prefer the path with the lowest ORIGIN type. a. Interior Gateway Protocol (IGP) is lower than Exterior Gateway Protocol (EGP), and EGP is lower than INCOMPLETE, in other words IGP < EGP < INCOMPLETE 8. Prefer the path with the lowest multi-exit discriminator (MED). a. The router compare MED attribute only for paths that have the same neighboring (leftmost) AS. Paths without explicit MED value are treated as with MED of 0 9. Prefer eBGP over iBGP paths 10. Prefer the route that comes from the BGP router with the lowest router ID. If a route carries the ORIGINATOR_ID attribute, then the ORIGINATOR_ID is used instead of router ID. 11. Prefer the route with the shortest route reflection cluster list. Routes without a cluster list are considered to have a cluster list of length 0. 12. Prefer the path that comes from the lowest neighbor address 30
www.glcnetworks.com BGP peering 31
www.glcnetworks.com Topology 32 AS 19 19.0.0.0/22 AS 17 17.0.0.0/22 AS 15 15.0.0.0/22 E4 AS 13 13.0.0.0/22 AS 11 11.0.0.0/22 R1 R2 R21 R22 R41 R42 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R3 R4 R23 R24 R43 R44 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R5 R6 R25 R26 R45 R46 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R7 R8 R27 R28 R47 R48 E2 E4 E4 E4 E2 E2 E2 E3 E3 E6 R9 R10 R29 R30 R49 R50 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 SW86 192.168.86.0/24 E5 E5 E5 E5 E5 R86 E6 R61 R62 R63 R64 R65 R66 R67 R68 R69 R70 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E6 E5 E6 E5 SW51 E2 E2 SW52 SW53 SW54 SW55 SW55 SW59 SW58 SW55 SW60 E2 pc79 pc80 E2 E3 E4 E2 E3 E2 E4 pc78 E2 E2 E3 E4 pc71 pc72 E2 E2 E3 E4 E3 E4 pc73 pc74 pc75 E2 pc76 E2 pc77 E2 E2 E3 E4 E2 E2 E3 E4 E2 E2 E3 E4 E2 E3 E4 E2 E3 E4 E6 E5 E6 E5 E6 E5 AS 86
www.glcnetworks.com BGP peer 33
www.glcnetworks.com BGP using loopback 34
www.glcnetworks.com BGP best practice: use loopback for BGP peering 35 Benefits ● Loopback interface is virtual → always ON ● Loopback interface is agnostic to physical status ● Resistant to topology change (with help of IGP) ● Very helpful for internal BGP (iBGP) peering ● eBGP can use loopback address too
www.glcnetworks.com Peering with loopback ● Make sure loopback addresses are reachable. For example, via IGP: RIP, OSPF, static route, etc ● Remote address: use peer’s loopback address ● Source address: Use our loopback address 36
www.glcnetworks.com QnA Any questions? 37
www.glcnetworks.com Interested? Just come to our training... ● Topics are arranged in systematic and logical way ● You will learn from experienced teacher ● Not only learn the materials, but also sharing experiences, best-practices, and networking 38
www.glcnetworks.com End of slides ● Thank you for your attention ● Please submit your feedback: http://bit.ly/glcfeedback ● Find our further event on our website : https://www.glcnetworks.com ● Like our facebook page: https://www.facebook.com/glcnetworks ● Slide: https://www.slideshare.net/glcnetworks/ ● Discord (bahasa indonesia): (https://discord.gg/6MZ3KUHHBX ) ● Recording (youtube): https://www.youtube.com/c/GLCNetworks ● Stay tune with our schedule 39

More Related Content

PDF
BGP on RouterOS7 -Part 1
byGLC Networks
 
PDF
MPLS on Router OS V7 - Part 1
byGLC Networks
 
PDF
Mikrotik IP Settings For Performance and Security
byGLC Networks
 
PDF
Best Current Practice (BCP) 38 Ingress Filtering for Security
byGLC Networks
 
PDF
BGP on mikrotik
byAchmad Mardiansyah
 
PDF
Mikrotik Fastpath vs Fasttrack
byGLC Networks
 
PDF
Mikrotik firewall raw table
byAchmad Mardiansyah
 
PDF
Mikrotik Load Balancing with PCC
byGLC Networks
 
BGP on RouterOS7 -Part 1
byGLC Networks
 
MPLS on Router OS V7 - Part 1
byGLC Networks
 
Mikrotik IP Settings For Performance and Security
byGLC Networks
 
Best Current Practice (BCP) 38 Ingress Filtering for Security
byGLC Networks
 
BGP on mikrotik
byAchmad Mardiansyah
 
Mikrotik Fastpath vs Fasttrack
byGLC Networks
 
Mikrotik firewall raw table
byAchmad Mardiansyah
 
Mikrotik Load Balancing with PCC
byGLC Networks
 

What's hot

PDF
Stable OSPF: choosing network type.pdf
byGLC Networks
 
PDF
Mikrotik Bridge Deep Dive
byGLC Networks
 
PDF
MTCNA Intro to routerOS
byGLC Networks
 
PDF
Routing fundamentals with mikrotik
byAchmad Mardiansyah
 
PDF
Layer 7 Firewall on Mikrotik
byGLC Networks
 
PDF
Network Monitoring with The Dude and Whatsapp
byGLC Networks
 
PDF
ISP Load Balancing with Mikrotik ECMP
byGLC Networks
 
PDF
Policy Based Routing (PBR) on Mikrotik
byGLC Networks
 
PDF
Mikrotik fastpath
byAchmad Mardiansyah
 
PPTX
Cisco Live Milan 2015 - BGP advance
byBertrand Duvivier
 
PDF
Segment Routing Advanced Use Cases - Cisco Live 2016 USA
byJose Liste
 
PDF
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
byBruno Teixeira
 
PDF
SEGMENT Routing
byBangladesh Network Operators Group
 
PDF
IPv6 Address Planning
byAPNIC
 
PDF
Bgp tutorial for ISP
byWahyu Nasution
 
PDF
Segment Routing Lab
byCisco Canada
 
PDF
Segment Routing Technology Deep Dive and Advanced Use Cases
byCisco Canada
 
PPT
Spanning tree protocol
byMuuluu
 
PDF
MikroTik & RouterOS
byFaelix Ltd
 
PDF
Ether channel fundamentals
byEdgardo Scrimaglia
 
Stable OSPF: choosing network type.pdf
byGLC Networks
 
Mikrotik Bridge Deep Dive
byGLC Networks
 
MTCNA Intro to routerOS
byGLC Networks
 
Routing fundamentals with mikrotik
byAchmad Mardiansyah
 
Layer 7 Firewall on Mikrotik
byGLC Networks
 
Network Monitoring with The Dude and Whatsapp
byGLC Networks
 
ISP Load Balancing with Mikrotik ECMP
byGLC Networks
 
Policy Based Routing (PBR) on Mikrotik
byGLC Networks
 
Mikrotik fastpath
byAchmad Mardiansyah
 
Cisco Live Milan 2015 - BGP advance
byBertrand Duvivier
 
Segment Routing Advanced Use Cases - Cisco Live 2016 USA
byJose Liste
 
Cisco Live! :: Introduction to Segment Routing :: BRKRST-2124 | Las Vegas 2017
byBruno Teixeira
 
SEGMENT Routing
byBangladesh Network Operators Group
 
IPv6 Address Planning
byAPNIC
 
Bgp tutorial for ISP
byWahyu Nasution
 
Segment Routing Lab
byCisco Canada
 
Segment Routing Technology Deep Dive and Advanced Use Cases
byCisco Canada
 
Spanning tree protocol
byMuuluu
 
MikroTik & RouterOS
byFaelix Ltd
 
Ether channel fundamentals
byEdgardo Scrimaglia
 

Similar to BGP tuning: Peer with loopback

PDF
BGP vs OSPF on Mikrotik
byGLC Networks
 
PDF
Internet Protocol Deep-Dive
byGLC Networks
 
PDF
BGP Services IP Transit vs IP Peering
byGLC Networks
 
PDF
RouterOS Migration From v6 to v7
byGLC Networks
 
PDF
Steering traffic in OSPF: Interface cost
byGLC Networks
 
PDF
Tuning OSPF: Bidirectional Forwarding Detection (BFD)
byGLC Networks
 
PDF
Tuning OSPF: Prefix Aggregate
byGLC Networks
 
PDF
Firewall mangle PBR: steering outbound path similar to inbound
byGLC Networks
 
PDF
Policy Based Routing with Indirect BGP - Part 1
byGLC Networks
 
PDF
Mikrotik User Meeting Manila: bgp vs ospf
byAchmad Mardiansyah
 
PDF
CCNA : Intro to Cisco IOS - Part 1
byGLC Networks
 
PPT
bgp.ppt
byaozcan1
 
PDF
Bgpeuro
bygigicaltea
 
PDF
Internal BGP tuning: Mesh peering to avoid loop
byGLC Networks
 
PDF
BGP security tuning: pull-up route
byGLC Networks
 
PDF
BGP troubleshooting: route origin
byGLC Networks
 
PDF
Tuning OSPF: area hierarchy, LSA, and area type
byGLC Networks
 
PDF
OSPF On Router OS7
byGLC Networks
 
PDF
U5CSS2 (1).pdf
bychelsi33
 
PPTX
15 coms 525 tcpip - border gateway protocols
byPalanivel Kuppusamy
 
BGP vs OSPF on Mikrotik
byGLC Networks
 
Internet Protocol Deep-Dive
byGLC Networks
 
BGP Services IP Transit vs IP Peering
byGLC Networks
 
RouterOS Migration From v6 to v7
byGLC Networks
 
Steering traffic in OSPF: Interface cost
byGLC Networks
 
Tuning OSPF: Bidirectional Forwarding Detection (BFD)
byGLC Networks
 
Tuning OSPF: Prefix Aggregate
byGLC Networks
 
Firewall mangle PBR: steering outbound path similar to inbound
byGLC Networks
 
Policy Based Routing with Indirect BGP - Part 1
byGLC Networks
 
Mikrotik User Meeting Manila: bgp vs ospf
byAchmad Mardiansyah
 
CCNA : Intro to Cisco IOS - Part 1
byGLC Networks
 
bgp.ppt
byaozcan1
 
Bgpeuro
bygigicaltea
 
Internal BGP tuning: Mesh peering to avoid loop
byGLC Networks
 
BGP security tuning: pull-up route
byGLC Networks
 
BGP troubleshooting: route origin
byGLC Networks
 
Tuning OSPF: area hierarchy, LSA, and area type
byGLC Networks
 
OSPF On Router OS7
byGLC Networks
 
U5CSS2 (1).pdf
bychelsi33
 
15 coms 525 tcpip - border gateway protocols
byPalanivel Kuppusamy
 

More from GLC Networks

PDF
EOIP Deep Dive
byGLC Networks
 
PDF
Voice Services, From Circuit Switch to VoIP
byGLC Networks
 
PDF
MPLS on Router OS V7 - Part 2
byGLC Networks
 
PDF
GIT as Mikrotik Configuration Management
byGLC Networks
 
PDF
Automatic Backup via FTP - Part 1
byGLC Networks
 
PDF
Building a Web Server with NGINX
byGLC Networks
 
PDF
Using Zettabyte Filesystem (ZFS)
byGLC Networks
 
PPTX
Automatic Backup via FTP - Part 2
byGLC Networks
 
PDF
OSPF On Router OS7 - Part 2
byGLC Networks
 
PDF
Policy Based Routing with Indirect BGP - Part 2
byGLC Networks
 
PDF
Controlling Access Between Devices in the same Layer 2 Segment
byGLC Networks
 
PDF
BGP on RouterOS7 - Part 2
byGLC Networks
 
EOIP Deep Dive
byGLC Networks
 
Voice Services, From Circuit Switch to VoIP
byGLC Networks
 
MPLS on Router OS V7 - Part 2
byGLC Networks
 
GIT as Mikrotik Configuration Management
byGLC Networks
 
Automatic Backup via FTP - Part 1
byGLC Networks
 
Building a Web Server with NGINX
byGLC Networks
 
Using Zettabyte Filesystem (ZFS)
byGLC Networks
 
Automatic Backup via FTP - Part 2
byGLC Networks
 
OSPF On Router OS7 - Part 2
byGLC Networks
 
Policy Based Routing with Indirect BGP - Part 2
byGLC Networks
 
Controlling Access Between Devices in the same Layer 2 Segment
byGLC Networks
 
BGP on RouterOS7 - Part 2
byGLC Networks
 

Recently uploaded

PDF
action man.pdf album sa slicicama panini...
byStefanFilipovic9
 
PDF
Batman Forever album sličice.pdf panini album
byStefanFilipovic9
 
PDF
Angry Birds film (2016).pdf panini album
byStefanFilipovic9
 
PDF
alfred jonatan kvak panini album.pdf slicice
byStefanFilipovic9
 
PDF
album panini Evoksi.pdf panini album slicice
byStefanFilipovic9
 
PDF
automobili.pdf panini album slicice ......
byStefanFilipovic9
 
PDF
Tour & Travel App Development Explained- Features, Costs, and Technologies Us...
byMike Brown
 
PDF
anastasia panini album.pdf album sa slicicama
byStefanFilipovic9
 
PDF
11 Best Sites for Buying Aged Reddit Accounts with Karma.pdf
byallseoit 143
 
PDF
Parallel and Distributed Databases NOTES.pdf
bywrushabsirsat
 
PPTX
Creating content that converts into leads.
bySEONutri
 
PDF
investor pitch - iapploud | independent music platform
byVenkat Subramanian
 
action man.pdf album sa slicicama panini...
byStefanFilipovic9
 
Batman Forever album sličice.pdf panini album
byStefanFilipovic9
 
Angry Birds film (2016).pdf panini album
byStefanFilipovic9
 
alfred jonatan kvak panini album.pdf slicice
byStefanFilipovic9
 
album panini Evoksi.pdf panini album slicice
byStefanFilipovic9
 
automobili.pdf panini album slicice ......
byStefanFilipovic9
 
Tour & Travel App Development Explained- Features, Costs, and Technologies Us...
byMike Brown
 
anastasia panini album.pdf album sa slicicama
byStefanFilipovic9
 
11 Best Sites for Buying Aged Reddit Accounts with Karma.pdf
byallseoit 143
 
Parallel and Distributed Databases NOTES.pdf
bywrushabsirsat
 
Creating content that converts into leads.
bySEONutri
 
investor pitch - iapploud | independent music platform
byVenkat Subramanian
 

BGP tuning: Peer with loopback

  • 1.
    www.glcnetworks.com BGP tuning: Peer withloopback GLC WEBINAR, 22 Dec 2022, 19:30 GMT+7 Achmad Mardiansyah achmad@glcnetworks.com GLC Networks, Indonesia
  • 2.
    www.glcnetworks.com Agenda ● Introduction ● Reviewprerequisite knowledge ● BGP ● BGP peer with loopback ● Live practice ● Q & A 2
  • 3.
  • 4.
    www.glcnetworks.com What is GLC? ●Garda Lintas Cakrawala (www.glcnetworks.com) ● Based in Bandung, Indonesia ● Areas: Training, IT Consulting ● Certified partner for: Mikrotik, Ubiquity, Linux foundation ● Product: GLC radius manager ● Regular event 4
  • 5.
    www.glcnetworks.com Trainer Introduction ● Name:Achmad Mardiansyah ● Base: bandung, Indonesia ● Linux user since 1999, mikrotik user since 2007, UBNT 2011 ● Mikrotik Certified Trainer (MTCNA/RE/WE/UME/INE/TCE/IPv6) ● Mikrotik/Linux Certified Consultant ● Website contributor: achmadjournal.com, mikrotik.tips, asysadmin.tips ● More info: http://au.linkedin.com/in/achmadmardiansyah 5
  • 6.
    www.glcnetworks.com Past experience ● 2020-2022(Congo DRC, PNG, Malaysia): network support, radius/billing integration ● 2019, Congo (DRC): build a wireless ISP from ground-up ● 2018, Malaysia: network revamp, develop billing solution and integration, setup dynamic routing ● 2017, Libya (north africa): remote wireless migration for a new Wireless ISP ● 2016, United Kingdom: workshop for wireless ISP, migrating a bridged to routed network ● 2015, Kalimantan, wireless support ● See our website for more details 6
  • 7.
    www.glcnetworks.com Please introduce yourself ●Your name ● Your company/university? ● Your networking experience? ● Your mikrotik experience? ● Your expectation from this course? 7
  • 8.
    www.glcnetworks.com Prerequisite This presentation someprerequisite knowledge ● We assume you already know: ○ TCP/IP ○ Mikrotik ○ Routing protocol ○ BGP 8
  • 9.
  • 10.
    www.glcnetworks.com 7 OSI layer& protocol ● OSI layer Is a conceptual model from ISO (International Standard Organization) for project OSI (Open System Interconnection) ● When you send a message with a courier, you need to add more info to get your message arrived at the destination (This process is called encapsulation) ● What is protocol ○ Is a set of rules for communication ○ Available on each layer ● Communication consist of series encapsulation ○ SDU: service data unit (before PDU) ○ PDU: protocol data unit (after header is added) 10
  • 11.
    www.glcnetworks.com Layered model (TCP/IPvs ISO) and encapsulation 11 / datagram
  • 12.
    www.glcnetworks.com Did you notice? ●There is a big overhead on encapsulation process ● More encapsulation means less payload? 12
  • 13.
    www.glcnetworks.com Router and Routing 13 ●Router is a network device that is used to forward packets, based on layer 3 information (layer 3 header) ● Routing is the process of selecting a path for traffic in a network, or between or across multiple networks Physical router Router icon
  • 14.
    www.glcnetworks.com Typical connection (physical) 14 R2 R1 R3 ●Router connects layer 2 segments ● Router works on layer 3, connecting L2 segments ● Meaning, each layer 2 segment has network ID
  • 15.
    www.glcnetworks.com Typical connection (logical)and routing table 15 Routing table: ● A table at router that is used to forward packet ● Available on every devices (router and host) ● Entry is executed sequentially 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 (default gw) 192.168.0.3
  • 16.
    www.glcnetworks.com Forwarding packets usingrouting table 16 ● It works like a firewall: match and action ● When a packet arrived, routing table is used to forward packets ● You should think in binary to understand how it works destination gateway 192.168.16.3/32 11000000 10101000 00001000 00000011 192.168.0.2 192.168.0.0/26 11000000 10101000 00000000 00 direct 192.168.1.0/24 11000000 10101000 00000001 direct 192.168.2.0/24 11000000 10101000 00000010 192.168.0.2 192.168.3.0/24 11000000 10101000 00000011 192.168.0.3 0.0.0.0/0 (no match) 192.168.0.3
  • 17.
    www.glcnetworks.com A packet arrivedat R1… (example) 17 Destination IP address of the packet is 192.168.2.6, which gateway do we use? A: 192.168.2.6 = (11000000 10101000 00000010 00000110) destination gateway 192.168.16.3/32 11000000 10101000 00001000 00000011 192.168.0.2 192.168.0.0/26 11000000 10101000 00000000 00 direct 192.168.1.0/24 11000000 10101000 00000001 direct 192.168.2.0/24 11000000 10101000 00000010 192.168.0.2 192.168.3.0/24 11000000 10101000 00000011 192.168.0.3 0.0.0.0/0 192.168.0.3
  • 18.
  • 19.
    www.glcnetworks.com How routing works& Administrative distance (analogy) 19 19 CITY 1 100 km CITY 2 120 km CITY 2 90 km CITY 3 500 km CITY 4 250 km 10.10.10.0/24 192.168.0.1 10 10.10.20.0/24 192.168.0.2 12 10.10.20.0/24 192.168.0.3 9 10.10.30.0/24 192.168.0.3 50 10.10.40.0/24 192.168.0.4 25
  • 20.
    www.glcnetworks.com Administrative distance 20 ● Distanceis considered when prefix length is same ● Lowest distance wins ● Administrative distance policy is depends on vendor ● Table on the right shows an example of administrative distance on cisco router
  • 21.
    www.glcnetworks.com Static routing 21 ● Entrieson routing table is created manually ● Admin must manage routing table in all routers ● Admin have full control 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 192.168.0.3
  • 22.
    www.glcnetworks.com Dynamic routing 22 ● Routerwill talk to each other with routing protocol (RIP, OSPF, BGP) ● Entries on routing table is created automatically ● Admin must have a good knowledge about routing protocol 192.168.0.0/26 R1 192.168.0.1/26 192.168.0.3/26 192.168.0.2/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24 destination gateway 192.168.0.0/26 direct 192.168.1.0/24 direct 192.168.2.0/24 192.168.0.2 192.168.3.0/24 192.168.0.3 192.168.16.3/32 192.168.0.2 0.0.0.0/0 192.168.0.3
  • 23.
    www.glcnetworks.com Routing metric ● isvalue used by a router to make routing decisions. It depends on routing protocols ● OSPF: accumulated cost ● RIP: hop count ● IS-IS: cost ● EIGRP: bandwidth, load, delay, reliability and MTU ● BGP: AS-Path, Next-hop, Origin, Local preference, Atomic aggregate, Multi Exit Discriminator (MED) 23
  • 24.
    www.glcnetworks.com Asymmetric routing 24 ● Currently,routing is done one-way only ● Forwarding process on router is based on destination IP address ● There is no guarantee incoming path is similar to outgoing path ● We can only control outgoing forwarding R1 192.168.0.1/26 192.168.0.3/26 R3 R2 192.168.1.0/24 192.168.2.0/24 192.168.3.0/24 192.168.3.3/24 192.168.3.9/24 192.168.2.9/24 192.168.2.2/24 192.168.1.1/24 192.168.1.9/24
  • 25.
  • 26.
    www.glcnetworks.com ● Dynamic routingprotocol, Path-vector ● Connecting AS numbers ● Each router need to create BGP-peer ○ Only receive and send routing prefix to peer ● At Layer 5 (session): use for BGP peer session ● At Layer 4 (transport): TCP port 179 ● Used by all routers in the internet ● Routes contents: ○ Full routes: all prefix in the internet ○ Partial routes: specific prefix Need to consider: ● Requires knowledge to operate ● More complex (compared to RIP), lots of options What is BGP? 26
  • 27.
    www.glcnetworks.com ● A collectionof Routers & Networks ● Under one administration (organisation, company, etc) ● Defined by AS number, given by IANA via RIR (APNIC, LACNIC, AFRINIC, ARIN, RIPE-NCC) ● We run BGP between AS ● Inside AS we run IGP (Interior gateway protocol): RIP, OSPF, IS-IS, EIGRP, etc Autonomous number (AS), IGP, BGP AS1 AS4 AS3 AS2 R1 27
  • 28.
    www.glcnetworks.com HOW BGP works? BGPsteps ● Each router must have router-id and AS number ● Each router must create BGP peer ● Setup BGP filter: ○ Inbound filter ○ Outbound filter ● Exchange routing tables between routers ● Send keep alive periodically 28
  • 29.
    www.glcnetworks.com BGP attributes BGP metricsare called path attributes. Classifications: ● Well-known (all router must support) ○ Mandatory (must exist, in every update) ■ AS-Path ■ Next-hop ■ Origin ○ Discretionary (not always exist) ■ Local preference ■ Atomic aggregate ● Optional (some routers do not support) ○ Transitive (If not recognized, marked as partial and still propagated to neighbor) ■ Community ■ Aggregator ○ Non-Transitive (If not recognized, discard) ■ Multi Exit Discriminator (MED) 29
  • 30.
    www.glcnetworks.com BGP best pathselection algorithm 1. Router is ignoring received path if the route is not valid. Route is valid if: a. NEXT_HOP of the route is valid and reachable b. AS_PATH received from external peers does not contain the local AS c. route is not rejected by routing filters 2. The first path received is automatically considered 'best path'. Any further received paths are compared to first received to determine if the new path is better. 3. Prefer the path with the highest WEIGHT. a. WEIGHT parameter is local to the router on which it is configured. A route without assigned WEIGHT have a default value of 0. 4. Prefer the path with the highest LOCAL_PREF. It is used only within an AS. a. A path without LOCAL_PREF attribute have a value of 100 by default. 5. Prefer the path with the shortest AS_PATH. (skipped if ignore-as-path-len set to yes) a. Each AS_SET counts as 1, regardless of the set size. The AS_CONFED_SEQUENCE and AS_CONFED_SET are not included in the AS_PATH length. 6. Prefer the path that was locally originated via aggregate or BGP network 7. Prefer the path with the lowest ORIGIN type. a. Interior Gateway Protocol (IGP) is lower than Exterior Gateway Protocol (EGP), and EGP is lower than INCOMPLETE, in other words IGP < EGP < INCOMPLETE 8. Prefer the path with the lowest multi-exit discriminator (MED). a. The router compare MED attribute only for paths that have the same neighboring (leftmost) AS. Paths without explicit MED value are treated as with MED of 0 9. Prefer eBGP over iBGP paths 10. Prefer the route that comes from the BGP router with the lowest router ID. If a route carries the ORIGINATOR_ID attribute, then the ORIGINATOR_ID is used instead of router ID. 11. Prefer the route with the shortest route reflection cluster list. Routes without a cluster list are considered to have a cluster list of length 0. 12. Prefer the path that comes from the lowest neighbor address 30
  • 31.
  • 32.
    www.glcnetworks.com Topology 32 AS 19 19.0.0.0/22 AS 17 17.0.0.0/22 AS15 15.0.0.0/22 E4 AS 13 13.0.0.0/22 AS 11 11.0.0.0/22 R1 R2 R21 R22 R41 R42 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R3 R4 R23 R24 R43 R44 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R5 R6 R25 R26 R45 R46 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 R7 R8 R27 R28 R47 R48 E2 E4 E4 E4 E2 E2 E2 E3 E3 E6 R9 R10 R29 R30 R49 R50 E2 E4 E4 E4 E4 E2 E2 E2 E3 E3 E6 SW86 192.168.86.0/24 E5 E5 E5 E5 E5 R86 E6 R61 R62 R63 R64 R65 R66 R67 R68 R69 R70 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E3 E3 E3 E3 E2 E2 E2 E2 E6 E5 E6 E5 SW51 E2 E2 SW52 SW53 SW54 SW55 SW55 SW59 SW58 SW55 SW60 E2 pc79 pc80 E2 E3 E4 E2 E3 E2 E4 pc78 E2 E2 E3 E4 pc71 pc72 E2 E2 E3 E4 E3 E4 pc73 pc74 pc75 E2 pc76 E2 pc77 E2 E2 E3 E4 E2 E2 E3 E4 E2 E2 E3 E4 E2 E3 E4 E2 E3 E4 E6 E5 E6 E5 E6 E5 AS 86
  • 33.
  • 34.
  • 35.
    www.glcnetworks.com BGP best practice:use loopback for BGP peering 35 Benefits ● Loopback interface is virtual → always ON ● Loopback interface is agnostic to physical status ● Resistant to topology change (with help of IGP) ● Very helpful for internal BGP (iBGP) peering ● eBGP can use loopback address too
  • 36.
    www.glcnetworks.com Peering with loopback ●Make sure loopback addresses are reachable. For example, via IGP: RIP, OSPF, static route, etc ● Remote address: use peer’s loopback address ● Source address: Use our loopback address 36
  • 37.
  • 38.
    www.glcnetworks.com Interested? Just cometo our training... ● Topics are arranged in systematic and logical way ● You will learn from experienced teacher ● Not only learn the materials, but also sharing experiences, best-practices, and networking 38
  • 39.
    www.glcnetworks.com End of slides ●Thank you for your attention ● Please submit your feedback: http://bit.ly/glcfeedback ● Find our further event on our website : https://www.glcnetworks.com ● Like our facebook page: https://www.facebook.com/glcnetworks ● Slide: https://www.slideshare.net/glcnetworks/ ● Discord (bahasa indonesia): (https://discord.gg/6MZ3KUHHBX ) ● Recording (youtube): https://www.youtube.com/c/GLCNetworks ● Stay tune with our schedule 39