Home

This is the one of famous question my customers asking all the time. How to configure secure BGP? There are few ways to make robust BGP session. Keep it in your mind, ISP doesn't provide all below commands (Don't wasting time). They would configure MD5 hash for your link. 

1. Using MD5 password

MD5 setting is common and easy to implement.

Cisco_Router(config-router)#neighbor x.x.x.x password c1sc0

 

Last Updated (Monday, 21 September 2009 21:51)

Read more...

 

Most of the decent size of ISP provides BGP community string for their customer. By using icon_BGP.pngBGP community string, you can control our announcement globally and it instantly affects your inbound traffic. In these days, modifying backbone routing policy in ISP is common. They don't want to loose their customer's traffic, so they apply BGP attribute to customer's announcement to avoid those traffic is leaving their backbone.

 

 

Last Updated (Wednesday, 06 January 2010 14:41)

Read more...

 

To bring BGP session minimum requires a configuration is really simple.  Just three lines oficon_BGP.png BGP statement will bring BGP session.
This is kinds of important to know, when you are troubleshooting.  If BGP doesnt come up, just simplify BGP configuration. It is sometimes best troubleshooting steps.

 

Last Updated (Wednesday, 06 January 2010 14:44)

Read more...

 

Controlling inbound traffic is the most important consideration when you are configuring BGP. icon_BGP.pngIf you have more than one ISP links, definetely you need to make sure your BGP announcement is propagate to Internet. If you have only one link to the ISP, again you don't really need BGP. Simple static route statement should be taking care of your needs.
Redundancy, failover and load-balancing traffic those are few major reasons that you have multiple links to ISP. Your BGP announcement is directly affecting your inbound traffic. Yes, it kinds of confuse if you are not dealing with BGP daily basis. How you annouce your routes bring traffic on one of your uplinks.

 

Last Updated (Wednesday, 06 January 2010 14:44)

Read more...

 

Outbound traffic control is actually easier than you thought. If you have single ISP link, icon_BGP.pngall outbound traffic will obviously exit out the link. As I mentioned earlier, if you have single ISP link then you don't really need BGP. Probably you may have more questions, if you have more than two ISP links. Redundanacy and load-sharing would be biggest concerns.

 

 

Last Updated (Wednesday, 06 January 2010 14:43)

Read more...

 
Google Translation
English Arabic Chinese (Simplified) Czech Dutch French German Italian Korean Portuguese Russian Spanish Filipino Vietnamese Thai Turkish
Smart Links
Statistics
Content View Hits : 111971
Polls
Who is the best ISP?
 
Global Route Table
Banner
Who's Online
We have 16 guests online