Got it

eBGP, problem reaching network

Created: Jan 10, 2021 13:04:02Latest reply: Jan 11, 2021 02:19:51 373 3 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi, hopefully you can help me with eBGP and reaching my prefixes.


-I can ping ip pool verlop gateway from internet, but can't ping a host.

-Host can ping gateway but nothing else

-Network has been imported under ipv4-family unicast with exactly the same subnet as logical interface


display ip routing-table "network":

Netaddress: next-hop "gateway address"

Gateway:  next hop 127.0.0.1

Host address: next hop 0.0.0.0


interface Vlanif8

 ip address x.x.x.1 255.255.255.0

#

#

ip pool velop server

 gateway x.x.x.1 255.255.255.0

 section 1 x.x.x.2 x.x.x.10

 dns-server 8.8.8.8 

 lease 0 0 5

#

interface GigabitEthernet0/3/2

 description Transit: Cogent 10Gbps

 undo shutdown

 ipv6 enable

 ip address x.x.x.x 255.255.255.248

 dcn

#

interface LoopBack0

 ipv6 enable

 ip address x.x.x.x 255.255.255.255

#

bgp xxxxxx

 router-id x.x.x.x

 graceful-restart

 group COGENTv4 external

 peer COGENTv4 as-number 174

 peer COGENTv4 connect-interface GigabitEthernet0/3/2

 peer COGENTv4 password cipher xxxxx

 peer x.x.x.x as-number 174

 peer x.x.x.x group COGENTv4

 #

 ipv4-family unicast

  undo synchronization

  default local-preference 50

  network x.x.x.x 255.255.254.0

  network x.x.x.x 255.255.255.0

  network x.x.x.x 255.255.255.255

  maximum load-balancing ebgp 3

  load-balancing as-path-ignore

  peer COGENTv4 enable

  peer COGENTv4 as-path-filter cogent-as-import import

  peer COGENTv4 as-path-filter pf-as-export export

  peer COGENTv4 ip-prefix ipv4-infilter import

  peer COGENTv4 ip-prefix ipv4-outfilter export

  peer COGENTv4 route-policy cogent import

  peer x.x.x.x enable

  peer x.x.x.x group COGENTv4

  #

  

  #

route-policy cogent permit node 10

 if-match as-path-filter cogent-as-import

#

ip ip-prefix ipv4-infilter index 20 deny 10.0.0.0 8

ip ip-prefix ipv4-infilter index 30 deny 100.64.0.0 10

ip ip-prefix ipv4-infilter index 40 deny 127.0.0.0 8

ip ip-prefix ipv4-infilter index 50 deny 169.254.0.0 16

ip ip-prefix ipv4-infilter index 60 deny 172.16.0.0 12

ip ip-prefix ipv4-infilter index 70 deny 192.0.0.0 24

ip ip-prefix ipv4-infilter index 80 deny 192.0.2.0 24

ip ip-prefix ipv4-infilter index 90 deny 192.168.0.0 16

ip ip-prefix ipv4-infilter index 100 deny 198.18.0.0 15

ip ip-prefix ipv4-infilter index 110 deny 198.51.100.0 24

ip ip-prefix ipv4-infilter index 120 deny 203.0.113.0 24

ip ip-prefix ipv4-infilter index 130 deny 224.0.0.0 4

ip ip-prefix ipv4-infilter index 140 deny 240.0.0.0 4

ip ip-prefix ipv4-infilter index 6000 permit 0.0.0.0 0 less-equal 32

#

ip ip-prefix ipv4-outfilter index 10 deny 0.0.0.0 8

ip ip-prefix ipv4-outfilter index 20 deny 10.0.0.0 8

ip ip-prefix ipv4-outfilter index 30 deny 100.64.0.0 10

ip ip-prefix ipv4-outfilter index 40 deny 127.0.0.0 8

ip ip-prefix ipv4-outfilter index 50 deny 169.254.0.0 16

ip ip-prefix ipv4-outfilter index 60 deny 172.16.0.0 12

ip ip-prefix ipv4-outfilter index 70 deny 192.0.0.0 24

ip ip-prefix ipv4-outfilter index 80 deny 192.0.2.0 24

ip ip-prefix ipv4-outfilter index 90 deny 192.168.0.0 16

ip ip-prefix ipv4-outfilter index 100 deny 198.18.0.0 15

ip ip-prefix ipv4-outfilter index 110 deny 198.51.100.0 24

ip ip-prefix ipv4-outfilter index 120 deny 203.0.113.0 24

ip ip-prefix ipv4-outfilter index 130 deny 224.0.0.0 4

ip ip-prefix ipv4-outfilter index 140 deny 240.0.0.0 4

ip ip-prefix ipv4-outfilter index 6000 permit 0.0.0.0 0 less-equal 24

ip as-path-filter cogent-as-import index 10 permit ^174.*

ip as-path-filter pf-as-export index 10 permit ^$

ip as-path-filter pf-as-export index 20 permit ^(3.10841_)+$



Featured Answers

Recommended answer

Popeye_Wang
Admin Created Jan 11, 2021 02:19:51

Hi, 

You said 'Network has been imported under ipv4-family unicast with exactly the same subnet as logical interface', but I don't see the related command from the configuration you posted. 

You may add the import-route command. 

Example

bgp xxxxxx

  import-route direct route-policy test

View more
  • x
  • convention:

All Answers
Hello,
We're working on your problem. Please be patient.
View more
  • x
  • convention:

E.DR_91
E.DR_91 MVE Author Created Jan 10, 2021 13:56:35

Hi Dear


Please check below:


  1. Identifying the Symptoms of a Broken Network Connection

                  ping (ip-address|hostname)
show route
(ip-address|hostname)
traceroute (ip-address|hostname
)

  1. Isolating the Causes of a Network Problem

show < configuration | interfaces | protocols
| route >

  1. Taking Appropriate Action for Resolving the Network Problem

[edit]
delete
routing options static routedestination-prefix
commit and-quit
show routedestination-prefix

  1. Evaluating the Solution to Check Whether the Network Problem Is Resolved

show route (ip-address|hostname)
ping (ip-address|hostname
)
count 3
traceroute (ip-address|hostname
)


To identify the symptoms of a problem on your network,
start at one end of your network and follow the routes to the other
end, entering all or one of the following Junos OS command-line interfaces
(CLI) operational mode commands:

content_copy zoom_out_map
user@host>ping(ip-address| host-name)
user@host>show route(ip-address| host-name)
user@host>traceroute(ip-address| host-name)


To isolate the cause of a particular problem, enter
one or all of the following Junos OS CLI operational mode command:

content_copy zoom_out_map

user@host>show <
configuration | bgp | interfaces | isis | ospf | route >



  • Check the local router’s configuration and edit
    it if appropriate.

  • Troubleshoot the intermediate router.

  • Check the remote host configuration and edit it if appropriate.

  • Troubleshoot routing protocols.

  • Identify additional possible causes.


To resolve the problem in this example, enter the following
Junos OS CLI commands:

content_copy zoom_out_map
[edit]
user@R2#delete routing-options static routedestination-prefix
user@R2#commit and-quit
user@R2#show routedestination-prefix


To evaluate the solution, enter the following Junos
OS CLI commands:

content_copy zoom_out_map
user@host>show route(ip-address  |host-name)
user@host>ping(ip-address  | host-name)
user@host>traceroute(ip-address  | host-name)


Configure
Routing Protocol Process Tracing
  1. Configure Routing Protocol Process Tracing

[edit]
edit routing-options
traceoptions
set filefilenamesizesize
filesnumber
show
commit
run show logfilename

  1. Configure Routing Protocol Tracing for a Specific Routing Protocol

[edit]
edit protocolprotocol-name
traceoptions
set
filefilenamesizesize
filesnumber
show
commit
run show logfilename

  1. Monitor Trace File Messages Written in Near-Real Time

monitor startfilename

  1. Stop Trace File Monitoring

monitor stopfilename

Configure BGP-Specific Options
  1. Display Detailed BGP Protocol Information

[edit]
edit protocol
bgp traceoptions
set flag update detail
show
commit
run show logfilename

  1. Display Sent or Received BGP Packets

[edit]
edit protocol
bgp traceoptions
set flag update (send | receive)
show
commit
run show logfilename

  1. Diagnose BGP Session Establishment Problems

[edit]
edit protocol
bgp
set traceoptions flag open detail
show
commit
run show logfilename

Configure IS-IS-Specific Options
  1. Displaying Detailed IS-IS Protocol Information

[edit]
edit protocol
isis traceoptions
set flag hello detail
show
commit
run show logfilename

  1. Displaying Sent or Received IS-IS Protocol Packets

[edit]
edit protocols
isis traceoptions
set flag hello (send | receive)
show
commit
run show logfilename

  1. Analyzing IS-IS Link-State PDUs in Detail

[edit]
edit protocols
isis traceoptions
set flag lsp detail
show
commit
run show logfilename

Configure OSPF-Specific Options
  1. Diagnose OSPF Session Establishment Problems

[edit]
edit protocols
ospf traceoptions
set flag hello detail
show
commit
run show logfilename

  1. Analyze OSPF Link-State Advertisement Packets in Detail

[edit]
edit protocols
ospf traceoptions
set flag lsa update detail
show
commit
run show logfilename


View more
  • x
  • convention:

Hi, 

You said 'Network has been imported under ipv4-family unicast with exactly the same subnet as logical interface', but I don't see the related command from the configuration you posted. 

You may add the import-route command. 

Example

bgp xxxxxx

  import-route direct route-policy test

View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.