RE: Multi site BGP Routing design

2009-06-09 Thread Ivan Pepelnjak
I am thinking the multiple ASN route is the cleanest but the idea of letting a default gateway (via static route maybe) out the local upstream connection to reach the other site when the backnet link is down sounds like it would work with minimal to no headaches but it just some how seems

RE: Multi site BGP Routing design

2009-06-08 Thread Justin Krejci
: Adam Greene [mailto:maill...@webjogger.net] Sent: Saturday, June 06, 2009 8:38 AM To: nanog@nanog.org Subject: Re: Multi site BGP Routing design Hi all, We actually have a very similar setup to what Justin asked about, with the exception that we advertise only some of our netblocks to one

RE: Multi site BGP Routing design

2009-06-06 Thread Ivan Pepelnjak
To rephrase the OP's question, would it be BCP to acquire a second ASN, and without further de-aggregating, continue advertising each site's IP space to the DFZ, but from dissimilar ASs as opposed to the same one? This would definitely be the best approach. You're not introducing new IP

Re: Multi site BGP Routing design

2009-06-06 Thread Saqib Ilyas
For a given interconnection between the upstream ISPs for the two site, once the direct link goes down, the time required for site A to learn the new route to site B and vice versa would be different with the different proposed solutions, right? Thanks and best regards On Sat, Jun 6, 2009 at

Re: Multi site BGP Routing design

2009-06-06 Thread Adam Greene
...@gmail.com To: nanog@nanog.org Sent: Saturday, June 06, 2009 8:21 AM Subject: Re: Multi site BGP Routing design For a given interconnection between the upstream ISPs for the two site, once the direct link goes down, the time required for site A to learn the new route to site B and vice versa would

Multi site BGP Routing design

2009-06-05 Thread Justin Krejci
We have two geographically distinct locations that currently both fall under the same ASN. At site 1 we have a particular set of ip networks (/20 and bigger) in use only locally to this site At site 2 we have a separate set of ip networks (/20 and bigger) in use only locally to this site

Re: Multi site BGP Routing design

2009-06-05 Thread Steve Bertrand
Justin Krejci wrote: If the private link between the two sites fails, will BGP allow for us to access the IP subnets at site 2 from site 1 via the internet given that both sites are advertising under the same ASN? No, because your router at site 2 will not accept any prefix with its own AS in

Re: Multi site BGP Routing design

2009-06-05 Thread Chris Adams
Once upon a time, Steve Bertrand st...@ibctech.ca said: Unless someone else has any better advice (I'm sure they do), you will need two separate public ASNs. Site 1 advertises it's space out of AS1, and site 2 advertises it's space from AS2. I don't know that it's better advice, but another

Re: Multi site BGP Routing design

2009-06-05 Thread Chuck Anderson
On Fri, Jun 05, 2009 at 05:50:28PM -0500, Justin Krejci wrote: If the private link between the two sites fails, will BGP allow for us to access the IP subnets at site 2 from site 1 via the internet given that both sites are advertising under the same ASN? Maybe. Especially if both sites are

RE: Multi site BGP Routing design

2009-06-05 Thread John.Herbert
to allow for that flow as well. j. From: Chris Adams [cmad...@hiwaay.net] Sent: Friday, June 05, 2009 20:16 To: nanog@nanog.org Subject: Re: Multi site BGP Routing design Once upon a time, Steve Bertrand st...@ibctech.ca said: Unless someone else has any better

Re: Multi site BGP Routing design

2009-06-05 Thread Steve Bertrand
Chuck Anderson wrote: On Fri, Jun 05, 2009 at 05:50:28PM -0500, Justin Krejci wrote: If the private link between the two sites fails, will BGP allow for us to access the IP subnets at site 2 from site 1 via the internet given that both sites are advertising under the same ASN? Maybe.

Re: Multi site BGP Routing design

2009-06-05 Thread Steve Bertrand
john.herb...@ins.com wrote: Depending on your security policies you may want to encrypt said tunnel also. Other than that, it all depends on it all depends. For example - if you receive / or have a default route pointing to the ISP, then the fact you have the same AS and won't receive the

RE: Multi site BGP Routing design

2009-06-05 Thread John.Herbert
it, you're SOL. j. From: Chuck Anderson [...@wpi.edu] Sent: Friday, June 05, 2009 20:33 To: nanog@nanog.org Subject: Re: Multi site BGP Routing design On Fri, Jun 05, 2009 at 05:50:28PM -0500, Justin Krejci wrote: If the private link between the two sites fails

RE: Multi site BGP Routing design

2009-06-05 Thread John.Herbert
. From: Steve Bertrand [st...@ibctech.ca] Sent: Friday, June 05, 2009 20:40 To: Herbert, John Cc: cmad...@hiwaay.net; nanog@nanog.org Subject: Re: Multi site BGP Routing design john.herb...@ins.com wrote: Depending on your security policies you may want to encrypt said tunnel also. Other than

Re: Multi site BGP Routing design

2009-06-05 Thread Chuck Anderson
On Fri, Jun 05, 2009 at 07:40:15PM -0500, john.herb...@ins.com wrote: This is a good concept but if the ISP route is a Juniper then as I recall by default it looks ahead, sees the as-path routing loop if it were to send it to the other router, and doesn't send it. So while you might be able

Re: Multi site BGP Routing design

2009-06-05 Thread Steve Bertrand
Chuck Anderson wrote: On Fri, Jun 05, 2009 at 07:40:15PM -0500, john.herb...@ins.com wrote: This is a good concept but if the ISP route is a Juniper then as I recall by default it looks ahead, sees the as-path routing loop if it were to send it to the other router, and doesn't send it. So

Re: Multi site BGP Routing design

2009-06-05 Thread Michael K. Smith
On 6/5/09 4:42 PM, Steve Bertrand st...@ibctech.ca wrote: Justin Krejci wrote: If the private link between the two sites fails, will BGP allow for us to access the IP subnets at site 2 from site 1 via the internet given that both sites are advertising under the same ASN? No, because your

Re: Multi site BGP Routing design

2009-06-05 Thread Steve Bertrand
Randy Bush wrote: Have you ever known an ISP to not co-operate when it comes to requesting a BGP session? yes. this problem is rampant with colonialist telcos in the poorer countries. Yeah, well, I don't live in a poorer country, and I deal with it here. *cough* Steve smime.p7s

Re: Multi site BGP Routing design

2009-06-05 Thread Randy Bush
Have you ever known an ISP to not co-operate when it comes to requesting a BGP session? yes. this problem is rampant with colonialist telcos in the poorer countries. Yeah, well, I don't live in a poorer country, and I deal with it here. *cough* you asked a question. you are not required

Re: Multi site BGP Routing design

2009-06-05 Thread Randy Bush
Have you ever known an ISP to not co-operate when it comes to requesting a BGP session? yes. this problem is rampant with colonialist telcos in the poorer countries. Yeah, well, I don't live in a poorer country, and I deal with it here. *cough* you asked a question. you are not required