Re: [j-nsp] How does multihop eBGP work?

2011-06-26 Thread Joel Jaeggli
On Jun 24, 2011, at 9:48 AM, Aaron Dewell wrote: Sure. Everything is actually routed hop-by-hop. As you've observed, that's a serious obstacle to multihop eBGP. Most uses I've seen involve crossing a non-BGP router to a customer, and redistributing whatever the customer advertises

Re: [j-nsp] How does multihop eBGP work?

2011-06-26 Thread Keegan Holley
Can you elaborate? This isn't really much info to go on. multi-hop BGP is pretty simple though. In fact it's pretty much identical to the way most configure iBGP (sans mpls). You peer based on an address that is not directly connected to you. Once that is established you start receiving

[j-nsp] How does multihop eBGP work?

2011-06-24 Thread Mike Williams
Hey guys, I've got a situation I think I need multihop bgp for (logical-systems and bridge-domains). However it bugs me deeply that I don't get multihop BGP. My biggest bugbear is if my multihop-ebgp peer tells me he know the best way to x.x.x.x, the packets I send towards him must be routed

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Doug Hanks
...@puck.nether.net [mailto:juniper-nsp-boun...@puck.nether.net] On Behalf Of Mike Williams Sent: Friday, June 24, 2011 9:33 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] How does multihop eBGP work? Hey guys, I've got a situation I think I need multihop bgp for (logical-systems and bridge-domains

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Aaron Dewell
Sure. Everything is actually routed hop-by-hop. As you've observed, that's a serious obstacle to multihop eBGP. Most uses I've seen involve crossing a non-BGP router to a customer, and redistributing whatever the customer advertises into their IGP. Klunky for sure, but it does work. Aaron

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Brian Raaen
Mike, While your router will use BGP to determine its next hop destination, if that next hop is no directly reachable over l2 it will use whatever route it uses for that destination. Which as soon as you hand it off to the first router it will determine the patch after that, unless you

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Patrick Okui
On 24/06/2011 7:33 PM, Mike Williams wrote: My biggest bugbear is if my multihop-ebgp peer tells me he know the best way to x.x.x.x, the packets I send towards him must be routed by intermediaries, will those intermediaries use their tables and hijack my packets down their bits of wet string

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Mike Williams
On Friday 24 June 2011 17:49:28 Patrick Okui wrote: BGP only populates your idea of the next hop towards your destination. Once your packets leave your network to the intermediary autonomous systems they forward the packets based on their idea of the best next hop. Short of some combination

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Alex
To: juniper-nsp@puck.nether.net Sent: Friday, June 24, 2011 6:20 PM Subject: Re: [j-nsp] How does multihop eBGP work? On Friday 24 June 2011 17:49:28 Patrick Okui wrote: BGP only populates your idea of the next hop towards your destination. Once your packets leave your network to the intermediary

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Patrick Okui
On 24/06/2011 8:43 PM, Alex wrote: If you ever need multihop eBGP again, and are still worrying about security/hijacking/packet modification/code injection there is a JUNOS feature called BGP IPSec protection which establishes transport IPSec SA between 2 Juniper boxes for explicit purpose of

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Thedin Guruge
, 2011 6:20 PM Subject: Re: [j-nsp] How does multihop eBGP work? On Friday 24 June 2011 17:49:28 Patrick Okui wrote: BGP only populates your idea of the next hop towards your destination. Once your packets leave your network to the intermediary autonomous systems they forward the packets based

Re: [j-nsp] How does multihop eBGP work?

2011-06-24 Thread Alex
Cc: Mike Williams mike.willi...@comodo.com; juniper-nsp@puck.nether.net Sent: Friday, June 24, 2011 7:56 PM Subject: Re: [j-nsp] How does multihop eBGP work? Alex, It's clever that bgp process is able to establish IPSec tunnel itself. Something good to be included in the RFC I guess :) Thanks