290 likes | 628 Views
BGP. Border gateway protokol adalah inter-autonomous system routing protokol BGP utama digunakan untuk merubah informasi network dengan BGP system yang lain Mikrotik menerapkan BGP versi 4 ( RFC 1771 ) . BGP System. Konfigurasi BGP network. Konfigurasi Peer.
E N D
BGP • Border gateway protokol adalah inter-autonomous system routing protokol • BGP utama digunakan untuk merubah informasi network dengan BGP system yang lain • Mikrotik menerapkan BGP versi 4 ( RFC 1771 )
Konfigurasi Peer • Spesifikasi BGP peer dengan siapa kita akan merubah informasi routing • Peer 1 untuk ASBR 1. Peer 2 untuk ASBR 2 • BGP akan merubah informasi routing hanya jika telah terjadi koneksi sebagai koneksi TCP untuk peernya. • Tcp port 179 harus dibuka di firewall • Kita dapat menambahkan banyak peer
Argument spesifik Peer • Multihop = yes , jika peer tidak sama dengan network. • Route reflect = yes , jika kedua peer ke AS dan kita akan meredistribute route untuk mempelajari darinya • Prefix list in dan Out untuk mengontrol route redistribusi.
Prefik List • Digunakan oleh RIP dan BGP untuk mengontrol route advertise untuk router yang lain dan menfilter route dari nya • Prefiks list mempunyai nama dan default aksi untuk list • Default action digunakan untuk router jangan samakan rule dari list. • Prefiks list=kelas Rute • Prefiks Length=panjang Rute dalam bits
Prefiks list • 203.12.1.2/24 berbeda network dengan 203.12.1.2/20
Prefiks list Rules • Prefix adlah network prefix yang disamakan • Prefix lenght adalah panjang dari prefix dalam satuan bits • Contoh prefix list • 0.0.0.0/0 prefix lenght=0 contoh alamat tujuan = 0.0.0.0 ( default destination ) • 0.0.0.0/0 prefix lenght=0-32 > any destination • 10.0.0.0/8 prefix lenght=17-32 > 10.0.4.0/17;10.5.0.0/24
Property Description BGP • as ( integer : 0 ..65535 ) - BGP autonomous system number • name ( name ; default: "" ) - BGP instance name • out-filter ( name ; default: "" ) - output routing filter used by this BGP instance • redistribute-connected ( yes | no ; default: no ) - if enabled, the router will redistribute the information about all connected routes, i.e., routes to the networks that can be directly reached
redistribute-ospf ( yes | no ; default: no ) - if enabled, the router will redistribute the information about all routes learned by the OSPF protocol • redistribute-other-bgp ( yes | no ; default: no ) - specifies whether this BGP instance should redistribute to its peers routes learned by other BGP instances • redistribute-rip ( yes | no ; default: no ) - if enabled, the router will redistribute the information about all routes learned by RIP protocol
redistribute-static ( yes | no ; default: no ) - if enabled, the router will redistribute the information about all static routes added to its routing database, i.e., routes that have been created using the /ip route add command on the router • router-id ( IP address ; default: 0.0.0.0 ) - the router identification string in form of an IP address. If no router-id is specified, it will be selected automatically based on the routing information
Property Description BGP Peer • hold-time ( time ) - specifies the BGP Hold Time value to use when negotiating with peers. According to BGP specifications, if router does not receive successive KEEPALIVE and/or UPDATE and/or NOTIFICATION messages within the period specified in the Hold Time field of the OPEN message, then the BGP connection to the peer will be closed • in-filter ( name ; default: "" ) - name of the routing filter that is applied to incoming routing update messages
keepalive-time ( time ) - specifies the time interval between successive KEEPALIVE messages.BGP process will negotiate the keepalive time with the neighbour upon connection establishment. • multihop ( yes | no ; default: no ) - if enabled, allows BGP sessions, even when the neighbour is not on a directly connected segment. The multihop session is not established if the only route to the multi-hop peer's address is the default route (0.0.0.0/0)
out-filter ( name ; default: "" ) - name of the routing filter that is applied to outgoing routing update messages • remote-address ( IP address ; default: 0.0.0.0 ) - address of the remote peer • remote-as ( integer ; default: 0 ) - AS number of the remote peer
BGP Routing Filters • Border Gateway Protocol (BGP) Routing filters allow to alter attributes of the route for the NLRI prefixes or completely exclude particular NLRI prefixes with routes from the BGP routing update message • These policies are implemented as rules organized in chains • action ( accept | discard | jump | none | reject | return