On Jun 24, 2011, at 9:48 AM, Aaron Dewell wrote:
Sure. Everything is actually routed hop-by-hop. As you've observed, that's
a serious obstacle to multihop eBGP.
Most uses I've seen involve crossing a non-BGP router to a customer, and
redistributing whatever the customer advertises
Can you elaborate? This isn't really much info to go on. multi-hop BGP is
pretty simple though. In fact it's pretty much identical to the way most
configure iBGP (sans mpls). You peer based on an address that is not
directly connected to you. Once that is established you start receiving
Hey guys,
I've got a situation I think I need multihop bgp for (logical-systems and
bridge-domains).
However it bugs me deeply that I don't get multihop BGP.
My biggest bugbear is if my multihop-ebgp peer tells me he know the best way
to x.x.x.x, the packets I send towards him must be routed
...@puck.nether.net
[mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Mike Williams
Sent: Friday, June 24, 2011 9:33 AM
To: juniper-nsp@puck.nether.net
Subject: [j-nsp] How does multihop eBGP work?
Hey guys,
I've got a situation I think I need multihop bgp for (logical-systems and
bridge-domains
Sure. Everything is actually routed hop-by-hop. As you've observed, that's a
serious obstacle to multihop eBGP.
Most uses I've seen involve crossing a non-BGP router to a customer, and
redistributing whatever the customer advertises into their IGP. Klunky for
sure, but it does work.
Aaron
Mike,
While your router will use BGP to determine its next hop destination,
if that next hop is no directly reachable over l2 it will use whatever route it
uses for that destination. Which as soon as you hand it off to the first router
it will determine the patch after that, unless you
On 24/06/2011 7:33 PM, Mike Williams wrote:
My biggest bugbear is if my multihop-ebgp peer tells me he know the
best way to x.x.x.x, the packets I send towards him must be routed by
intermediaries, will those intermediaries use their tables and
hijack my packets down their bits of wet string
On Friday 24 June 2011 17:49:28 Patrick Okui wrote:
BGP only populates your idea of the next hop towards your destination.
Once your packets leave your network to the intermediary autonomous
systems they forward the packets based on their idea of the best next hop.
Short of some combination
To: juniper-nsp@puck.nether.net
Sent: Friday, June 24, 2011 6:20 PM
Subject: Re: [j-nsp] How does multihop eBGP work?
On Friday 24 June 2011 17:49:28 Patrick Okui wrote:
BGP only populates your idea of the next hop towards your destination.
Once your packets leave your network to the intermediary
On 24/06/2011 8:43 PM, Alex wrote:
If you ever need multihop eBGP again, and are still worrying about
security/hijacking/packet modification/code injection there is a JUNOS
feature called BGP IPSec protection which establishes transport IPSec
SA between 2 Juniper boxes for explicit purpose of
, 2011 6:20 PM
Subject: Re: [j-nsp] How does multihop eBGP work?
On Friday 24 June 2011 17:49:28 Patrick Okui wrote:
BGP only populates your idea of the next hop towards your destination.
Once your packets leave your network to the intermediary autonomous
systems they forward the packets based
Cc: Mike Williams mike.willi...@comodo.com;
juniper-nsp@puck.nether.net
Sent: Friday, June 24, 2011 7:56 PM
Subject: Re: [j-nsp] How does multihop eBGP work?
Alex,
It's clever that bgp process is able to establish IPSec tunnel itself.
Something good to be included in the RFC I guess :)
Thanks
12 matches
Mail list logo