Implementing BGP On ASR 9K

Implementing BGP on
Cisco ASR 9000 Series Routers

Border Gateway Protocol (BGP) is an Exterior Gateway Protocol (EGP) that allows you to create
loop-free interdomain routing between autonomous systems. This module provides the conceptual and
configuration information for BGP on Cisco ASR 9000 Series Aggregation Services Routers.
An autonomous system is a set of routers under a single technical administration. Routers in an
autonomous system can use multiple Interior Gateway Protocols (IGPs) to exchange routing information
inside the autonomous system and an EGP to route packets outside the autonomous system.
Note
For more information about BGP and complete descriptions of the BGP commands listed in this module,
see the Related Documents section of this module. To locate documentation for other commands that
might appear while performing a configuration task, search online in the
Cisco ASR 9000 Series Routers software master command index.
Feature History for Implementing BGP on Cisco ASR 9000 Series Routers
Release
Modification
Release 3.7.2
This feature was introduced on Cisco ASR 9000 Series Routers.
Contents
Prerequisites for Implementing BGP, page RC-2
Information About Implementing BGP, page RC-2
How to Implement BGP, page RC-39
Configuration Examples for Implementing BGP, page RC-123
Where to Go Next, page RC-128
Additional References, page RC-128
Cisco ASR 9000 Series Aggregation Services Router Routing Configuration Guide
OL-17300-01
RC-1
Implementing BGP on Cisco ASR 9000 Series Routers

Prerequisites for Implementing BGP
Prerequisites for Implementing BGP

You must be in a user group associated with a task group that includes the proper task IDs. The command
reference guides include the task IDs required for each command. If you suspect user group assignment
is preventing you from using a command, contact your AAA administrator for assistance.
Information About Implementing BGP

To implement BGP, you need to understand the following concepts:
BGP Functional Overview, page RC-2
BGP Router Identifier, page RC-3
BGP Default Limits, page RC-3
BGP Next Hop Tracking, page RC-4
Autonomous System Number Formats in BGP, page RC-6
BGP Configuration, page RC-6
No Default Address Family, page RC-19
Routing Policy Enforcement, page RC-19
Table Policy, page RC-21
Update Groups, page RC-21
BGP Cost Community, page RC-22
BGP Best Path Algorithm, page RC-26
Administrative Distance, page RC-30
Multiprotocol BGP, page RC-31
Route Dampening, page RC-33
BGP Routing Domain Confederation, page RC-34
BGP Route Reflectors, page RC-34
Default Address Family for show Commands, page RC-37
Distributed BGP, page RC-37
MPLS VPN Carrier Supporting Carrier, page RC-38
BGP Keychains, page RC-39
How to Implement BGP, page RC-39
BGP Functional Overview

BGP uses TCP as its transport protocol. Two BGP routers form a TCP connection between one another
(peer routers) and exchange messages to open and confirm the connection parameters.
BGP routers exchange network reachability information. This information is mainly an indication of the
full paths (BGP autonomous system numbers) that a route should take to reach the destination network.
This information helps construct a graph that shows which autonomous systems are loop free and where
routing policies can be applied to enforce restrictions on routing behavior.
RC-2
OL-17300-01

Any two routers forming a TCP connection to exchange BGP routing information are called peers or
neighbors. BGP peers initially exchange their full BGP routing tables. After this exchange, incremental
updates are sent as the routing table changes. BGP keeps a version number of the BGP table, which is
the same for all of its BGP peers. The version number changes whenever BGP updates the table due to
routing information changes. Keepalive packets are sent to ensure that the connection is alive between
the BGP peers and notification packets are sent in response to error or special conditions.
Note
For information on configuring BGP to distribute Multiprotocol Label Switching (MPLS) Layer 3
virtual private network (VPN) information, see the Cisco ASR 9000 Series Aggregation Services Router
MPLS Configuration Guide.
Note
For information on BGP support for Bidirectional Forwarding Detection (BFD), see the
Cisco ASR 9000 Series Aggregation Services Router Interface and Hardware Configuration Guide and
the Cisco ASR 9000 Series Aggregation Services Router Interface and Hardware Command Reference.
BGP Router Identifier

For BGP sessions between neighbors to be established, BGP must be assigned a router ID. The router
ID is sent to BGP peers in the OPEN message when a BGP session is established.
BGP attempts to obtain a router ID in the following ways (in order of preference):
By means of the address configured using the bgp router-id command in router configuration mode.
By using the highest IPv4 address on a loopback interface in the system if the router is booted with
saved loopback address configuration.
By using the primary IPv4 address of the first loopback address that gets configured if there are not
any in the saved configuration.
If none of these methods for obtaining a router ID succeeds, BGP does not have a router ID and cannot
establish any peering sessions with BGP neighbors. In such an instance, an error message is entered in
the system log, and the show bgp summary command displays a router ID of 0.0.0.0.
After BGP has obtained a router ID, it continues to use it even if a better router ID becomes available.
This usage avoids unnecessary flapping for all BGP sessions. However, if the router ID currently in use
becomes invalid (because the interface goes down or its configuration is changed), BGP selects a new
router ID (using the rules described) and all established peering sessions are reset.
Note
We strongly recommend that the bgp router-id command is configured to prevent unnecessary changes
to the router ID (and consequent flapping of BGP sessions).
BGP Default Limits

Cisco IOS XR BGP imposes maximum limits on the number of neighbors that can be configured on the
router and on the maximum number of prefixes that are accepted from a peer for a given address family.
This limitation safeguards the router from resource depletion caused by misconfiguration, either locally
or on the remote neighbor. The following limits apply to BGP configurations:
OL-17300-01
RC-3

The default maximum number of peers that can be configured is 4000. The default can be changed
using the bgp maximum neighbor command. The limit range is 1 to 15000. Any attempt to
configure additional peers beyond the maximum limit or set the maximum limit to a number that is
less than the number of peers currently configured will fail.
To prevent a peer from flooding BGP with advertisements, a limit is placed on the number of
prefixes that are accepted from a peer for each supported address family. The default limits can be
overridden through configuration of the maximum-prefix limit command for the peer for the
appropriate address family. The following default limits are used if the user does not configure the
maximum number of prefixes for the address family:
512K (524,288) prefixes for IPv4 unicast
128K (131,072) prefixes for IPv4 multicast
128K (131,072) prefixes for IPv6 unicast
512K (524,288) prefixes for VPNv4 unicast
A cease notification message is sent to the neighbor and the peering with the neighbor is terminated
when the number of prefixes received from the peer for a given address family exceeds the maximum
limit (either set by default or configured by the user) for that address family.
It is possible that the maximum number of prefixes for a neighbor for a given address family has been
configured after the peering with the neighbor has been established and a certain number of prefixes have
already been received from the neighbor for that address family. A cease notification message is sent to
the neighbor and peering with the neighbor is terminated immediately after the configuration if the
configured maximum number of prefixes is fewer than the number of prefixes that have already been
received from the neighbor for the address family.
BGP Next Hop Tracking

BGP receives notifications from the Routing Information Base (RIB) when next-hop information
changes (event-driven notifications). BGP obtains next-hop information from the RIB to:
Determine whether a next hop is reachable.
Find the fully recursed IGP metric to the next hop (used in the best-path calculation).
Validate the received next hops.
Calculate the outgoing next hops.
Verify the reachability and connectedness of neighbors.
BGP is notified when any of the following events occurs:
Next hop becomes unreachable
Next hop becomes reachable
Fully recursed IGP metric to the next hop changes
First hop IP address or first hop interface change
Next hop becomes connected
Next hop becomes unconnected
Next hop becomes a local address
Next hop becomes a nonlocal address
RC-4
OL-17300-01

Note
Reachability and recursed metric events trigger a best-path recalculation.

Event notifications from the RIB are classified as critical and noncritical. Notifications for critical and
noncritical events are sent in separate batches. However, a noncritical event is sent along with the critical
events if the noncritical event is pending and there is a request to read the critical events.
Critical events are related to the reachability (reachable and unreachable), connectivity (connected
and unconnected), and locality (local and nonlocal) of the next hops. Notifications for these events
are not delayed.
Noncritical events include only the IGP metric changes. These events are sent at an interval of 3
seconds. A metric change event is batched and sent 3 seconds after the last one was sent.
The next-hop trigger delay for critical and noncritical events can be configured to specify a minimum
batching interval for critical and noncritical events using the nexthop trigger-delay command. The
trigger delay is address family dependent.
The BGP next-hop tracking feature allows you to specify that BGP routes are resolved using only next
hops whose routes have the following characteristics:
To avoid the aggregate routes, the prefix length must be greater than a specified value.
The source protocol must be from a selected list, ensuring that BGP routes are not used to resolve
next hops that could lead to oscillation.
This route policy filtering is possible because RIB identifies the source protocol of route that resolved a
next hop as well as the mask length associated with the route. The nexthop route-policy command is
used to specify the route-policy.
For information on route policy filtering for next hops using the next-hop attach point, see the
Implementing Routing Policy on Cisco ASR 9000 Series Routers module of the Cisco ASR 9000 Series
Aggregation Services Router Routing Configuration Guide (this publication).
Scoped IPv4/VPNv4 Table Walk

To determine which address family to process, a next-hop notification is received by first dereferencing
the gateway context associated with the next hop, then looking into the gateway context to determine
which address families are using the gateway context. The IPv4 unicast and VPNv4 unicast address
families share the same gateway context, because they are registered with the IPv4 unicast table in the
RIB. As a result, both the global IPv4 unicast table and the VPNv4 table are processed when an IPv4
unicast next-hop notification is received from the RIB. A mask is maintained in the next hop, indicating
whether the next hop belongs to IPv4 unicast or VPNv4 unicast, or both. This scoped table walk localizes
the processing in the appropriate address family table.
Reordered Address Family Processing

The Cisco IOS XR software walks address family tables based on the numeric value of the address
family. When a next-hop notification batch is received, the order of address family processing is
reordered to the following order:
IPv4 tunnel
VPNv4 unicast
IPv4 labeled unicast
IPv4 unicast
OL-17300-01
RC-5

IPv4 multicast
IPv6 unicast
New Thread for Next-Hop Processing

The critical-event thread in the spkr process handles only next-hop, Bidirectional Forwarding Detection
(BFD), and fast-external-failover (FEF) notifications. This critical-event thread ensures that BGP
convergence is not adversely impacted by other events that may take a significant amount of time.
show, clear, and debug Commands

The show bgp nexthops command provides statistical information about next-hop notifications, the
amount of time spent in processing those notifications, and details about each next hop registered with
the RIB. The clear bgp nexthop performance-statistics command ensures that the cumulative statistics
associated with the processing part of the next-hop show command can be cleared to help in monitoring.
The clear bgp nexthop registration command performs an asynchronous registration of the next hop
with the RIB. See the BGP Commands on Cisco ASR 9000 Series Routers module of
Cisco ASR 9000 Series Aggregation Services Router Routing Command Reference for information on
the next-hop show and clear commands.
The debug bgp nexthop command displays information on next-hop processing. The out keyword
provides debug information only about BGP registration of next hops with RIB. The in keyword displays
debug information about next-hop notifications received from RIB. The out keyword displays debug
information about next-hop notifications sent to the RIB. See the BGP Debug Commands on
Cisco ASR 9000 Series Router module of the Cisco ASR 9000 Series Aggregation Services Router
Routing Debug Command Reference.
Autonomous System Number Formats in BGP

Autonomous system numbers (ASNs) are globally unique identifiers used to identify autonomous
systems (ASs) and enable ASs to exchange exterior routing information between neighboring ASs. A
unique ASN is allocated to each AS for use in BGP routing.
Currently, ASNs are encoded as 2-byte numbers in BGP. The 2-byte range is 1 to 65535. To prepare for
the eventual exhaustion of 2-byte ASNs, BGP has the capability to support 4-byte ASNs. The 4-byte
range is 1.0 to 65535.65535 and the format is:
high-order-16-bit-value-in-decimal . low-order-16-bit-value-in-decimal
The BGP 4-byte ASN capability is used to propagate 4-byte-based AS path information across BGP
speakers that do not support 4-byte AS numbers. This capability allows for the gradual transition from
2-byte ASNs to 4-byte ASNs. See draft-ietf-idr-as4bytes-12.txt for information on increasing the size of
an ASN from 2 bytes to 4 bytes.
BGP Configuration
BGP in Cisco IOS XR software follows a neighbor-based configuration model that requires that all
configurations for a particular neighbor be grouped in one place under the neighbor configuration. Peer
groups are not supported for either sharing configuration between neighbors or for sharing update
RC-6
OL-17300-01

messages. The concept of peer group has been replaced by a set of configuration groups to be used as
templates in BGP configuration and automatically generated update groups to share update messages
between neighbors.
Configuration Modes
BGP configurations are grouped into modes. The following sections show how to enter some of the BGP
configuration modes. From a mode, you can enter the ? command to display the commands available in
that mode.
Router Configuration Mode, page RC-7
Router Address Family Configuration Mode, page RC-7
Neighbor Configuration Mode, page RC-7
Neighbor Address Family Configuration Mode, page RC-7
VRF Configuration Mode, page RC-8
VRF Address Family Configuration Mode, page RC-8
VRF Neighbor Configuration Mode, page RC-8
VRF Neighbor Address Family Configuration Mode, page RC-8
VPNv4 Address Family Configuration Mode, page RC-8
Router Configuration Mode

The following example shows how to enter router configuration mode:
RP/0/RSP0/CPU0:router# configuration
RP/0/RSP0/CPU0:router(config)# router bgp 140
RP/0/RSP0/CPU0:router(config-bgp)#
Router Address Family Configuration Mode

The following example shows how to enter router address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# address-family ipv4 multicast
RP/0/RSP0/CPU0:router(config-bgp-af)#
Neighbor Configuration Mode

The following example shows how to enter neighbor configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor 10.0.0.1
RP/0/RSP0/CPU0:router(config-bgp-nbr)#
Neighbor Address Family Configuration Mode

The following example shows how to enter neighbor address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)#
OL-17300-01
RC-7

VRF Configuration Mode

The following example shows how to enter VPN routing and forwarding (VRF) configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# vrf vrf_A
RP/0/RSP0/CPU0:router(config-bgp-vrf)#
VRF Address Family Configuration Mode

The following example shows how to enter VRF address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-vrf-af)#
VRF Neighbor Configuration Mode

The following example shows how to enter VRF neighbor configuration mode:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# neighbor 11.0.1.2
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr)#
VRF Neighbor Address Family Configuration Mode

The following example shows how to enter VRF neighbor address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr-af)#
VPNv4 Address Family Configuration Mode

The following example shows how to enter VPNv4 address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# address-family vpnv4 unicast
Neighbor Submode
Cisco IOS XR BGP uses a neighbor submode to make it possible to enter configurations without having
to prefix every configuration with the neighbor keyword and the neighbor address:
Cisco IOS XR software has a submode available for neighbors in which it is not necessary for every
command to have a neighbor x.x.x.x prefix:
In Cisco IOS XR software, the configuration is as follows:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# remote-as 2002
RP/0/RSP0/CPU0:router(config-bgp-nbr)# address-family ipv4 multicast
RC-8
OL-17300-01

An address family configuration submode inside the neighbor configuration submode is available
for entering address family-specific neighbor configurations. In Cisco IOS XR software, the
configuration is as follows:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor 2002::2
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# next-hop-self
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# route-policy one in
You must enter neighbor-specific IPv4, IPv6, VPNv4, or VPNv6 commands in neighbor
address-family configuration submode. In Cisco IOS XR software, the configuration is as follows:
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# maximum-prefix 1000
You must enter neighbor-specific IPv4 and IPv6 commands in VRF neighbor address-family
configuration submode. In Cisco IOS XR software, the configuration is as follows:
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr-af)# route-policy pass all in
Configuration Templates
The af-group, session-group, and neighbor-group configuration commands provide template support
for the neighbor configuration in Cisco IOS XR software.
The af-group command is used to group address family-specific neighbor commands within an IPv4,
IPv6, VPNv4, or VPNv6 address family. Neighbors that have the same address family configuration are
able to use the address family group (af-group) name for their address family-specific configuration. A
neighbor inherits the configuration from an address family group by way of the use command. If a
neighbor is configured to use an address family group, the neighbor (by default) inherits the entire
configuration from the address family group. However, a neighbor does not inherit all of the
configuration from the address family group if items are explicitly configured for the neighbor. The
address family group configuration is entered under the BGP router configuration mode. The following
example shows how to enter address family group configuration mode.
RP/0/RSP0/CPU0:router(config-bgp)# af-group afmcast1 address-family ipv4 multicast
RP/0/RSP0/CPU0:router(config-bgp-afgrp)#
The session-group command allows you to create a session group from which neighbors can inherit
address family-independent configuration. A neighbor inherits the configuration from a session group
by way of the use command. If a neighbor is configured to use a session group, the neighbor (by default)
inherits the entire configuration of the session group. A neighbor does not inherit all of the configuration
from a session group if a configuration is done directly on that neighbor. The following example shows
how to enter session group configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# session-group session1
RP/0/RSP0/CPU0:router(config-bgp-sngrp)#
OL-17300-01
RC-9

The neighbor-group command helps you apply the same configuration to one or more neighbors.
Neighbor groups can include session groups and address family groups and can comprise the complete
configuration for a neighbor. After a neighbor group is configured, a neighbor can inherit the
configuration of the group using the use command. If a neighbor is configured to use a neighbor group,
the neighbor inherits the entire BGP configuration of the neighbor group.
The following example shows how to enter neighbor group configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group nbrgroup1
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)#
The following example shows how to enter neighbor group address family configuration mode:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group nbrgroup1
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)#
However, a neighbor does not inherit all of the configuration from the neighbor group if items are
explicitly configured for the neighbor. In addition, some part of the configuration of the neighbor
group could be hidden if a session group or address family group was also being used.
Configuration grouping has the following effects in Cisco IOS XR software:
Commands entered at the session group level define address family-independent commands (the
same commands as in the neighbor submode).
Commands entered at the address family group level define address family-dependent commands
for a specified address family (the same commands as in the neighbor-address family configuration
submode).
Commands entered at the neighbor group level define address family-independent commands and
address family-dependent commands for each address family (the same as all available neighbor
commands), and define the use command for the address family group and session group commands.
Template Inheritance Rules

In Cisco IOS XR software, BGP neighbors or groups inherit configuration from other configuration
groups.
For address family-independent configurations:
Neighbors can inherit from session groups and neighbor groups.
Neighbor groups can inherit from session groups and other neighbor groups.
Session groups can inherit from other session groups.
If a neighbor uses a session group and a neighbor group, the configurations in the session group are
preferred over the global address family configurations in the neighbor group.
For address family-dependent configurations:
Address family groups can inherit from other address family groups.
Neighbor groups can inherit from address family groups and other neighbor groups.
Neighbors can inherit from address family groups and neighbor groups.
RC-10
OL-17300-01

Configuration group inheritance rules are numbered in order of precedence as follows:

1.
If the item is configured directly on the neighbor, that value is used. In the example that follows, the
advertisement interval is configured both on the neighbor group and neighbor configuration and the
advertisement interval being used is from the neighbor configuration:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group AS_1
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# advertisement-interval 15
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# exit
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use neighbor-group AS_1
RP/0/RSP0/CPU0:router(config-bgp-nbr)# advertisement-interval 20
The following output from the show bgp neighbors command shows that the advertisement interval
used is 20 seconds:
RP/0/RSP0/CPU0:router# show bgp neighbors 10.1.1.1
BGP neighbor is 10.1.1.1, remote AS 1, local AS 140, external link
Remote router ID 0.0.0.0
BGP state = Idle
Last read 00:00:00, hold time is 180, keepalive interval is 60 seconds
Received 0 messages, 0 notifications, 0 in queue
Sent 0 messages, 0 notifications, 0 in queue
Minimum time between advertisement runs is 20 seconds
For Address Family: IPv4 Unicast
BGP neighbor version 0
Update group: 0.1
eBGP neighbor with no inbound or outbound policy; defaults to 'drop'
Route refresh request: received 0, sent 0
0 accepted prefixes
Prefix advertised 0, suppressed 0, withdrawn 0, maximum limit 524288
Threshold for warning message 75%
Connections established 0; dropped 0
Last reset 00:00:14, due to BGP neighbor initialized
External BGP neighbor not directly connected.
2.
Otherwise, if the neighbor uses a session group or address family group, the configuration value is
obtained from the session group or address family group. If the address family group or session
group has a parent and an item is configured on the parent, the parent configuration is used. If the
item is not configured on the parent but is configured on the parent of the parent, the configuration
of the parent of the parent is used, and so on. In the example that follows, the advertisement interval
is configured on a neighbor group and a session group and the advertisement interval value being
used is from the session group:
RP/0/RSP0/CPU0:router(config-bgp)# session-group AS_2
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# advertisement-interval 15
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# exit
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use session-group AS_2
used is 15 seconds:
OL-17300-01
RC-11


BGP state = Idle
Update group: 0.1
0 accepted prefixes
3.
Otherwise, if the neighbor uses a neighbor group and does not use a session group or address family
group, the configuration value can be obtained from the neighbor group either directly or through
inheritance. In the example that follows, the advertisement interval from the neighbor group is used
because it is not configured directly on the neighbor and no session group is used:
RP/0/RSP0/CPU0:router(config-bgp)# session-group AS_2
used is 15 seconds:
BGP state = Idle
Update group: 0.1
eBGP neighbor with no outbound policy; defaults to 'drop'
Inbound path policy configured
Policy for incoming advertisements is POLICY_1
0 accepted prefixes
RC-12
OL-17300-01


To illustrate the same rule, the following example shows how to set the advertisement interval to 15
(from the session group) and 25 (from the neighbor group). The advertisement interval set in the
session group overrides the one set in the neighbor group. The inbound policy is set to POLICY_1
from the neighbor group.
RP/0/RSP0/CPU0:router(config-bgp)# session-group ADV
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group ADV_2
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# route-policy POLICY_1 in
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# exit
RP/0/RSP0/CPU0:router(config-bgp)# exit
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use session-group ADV
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use neighbor-group TIMER
used is 15 seconds:
BGP state = Idle
Update group: 0.1
0 accepted prefixes
4.
Otherwise, the default value is used. In the example that follows, neighbor 10.0.101.5 has the
minimum time between advertisement runs set to 30 seconds (default) because the neighbor is not
configured to use the neighbor configuration or the neighbor group configuration:
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# remote-as 1
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group adv_15
OL-17300-01
RC-13

RP/0/RSP0/CPU0:router(config-bgp-nbr)# exit
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use neighbor-group adv_15
used is 30 seconds:
BGP state = Idle
Update group: 0.2
0 accepted prefixes
The inheritance rules used when groups are inheriting configuration from other groups are the same
as the rules given for neighbors inheriting from groups.
Viewing Inherited Configurations

You can use the following show commands to view BGP inherited configurations:
show bgp neighbors, page RC-14
show bgp af-group, page RC-15
show bgp session-group, page RC-16
show bgp neighbor-group, page RC-17
show bgp neighbors

Use the show bgp neighbors command to display information about the BGP configuration for
neighbors.
Use the configuration keyword to display the effective configuration for the neighbor, including any
settings that have been inherited from session groups, neighbor groups, or address family groups
used by this neighbor.
Use the inheritance keyword to display the session groups, neighbor groups, and address family
groups from which this neighbor is capable of inheriting configuration.
The show bgp neighbors command examples that follow are based on this sample configuration:
RP/0/RSP0/CPU0:router(config-bgp)# af-group GROUP_3 address-family ipv4 unicast
RC-14
OL-17300-01

RP/0/RSP0/CPU0:router(config-bgp-afgrp)# next-hop-self
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# route-policy POLICY_1 in
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# exit
RP/0/RSP0/CPU0:router(config-bgp)# session-group GROUP_2
RP/0/RSP0/CPU0:router(config-bgp)# neighbor-group GROUP_1
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# use session-group GROUP_2
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# ebgp-multihop 3
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# weight 100
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# send-community-ebgp
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# address-family ipv4 multicast
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# default-originate
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use neighbor-group GROUP_1
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# use af-group GROUP_3
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# weight 200
The following example displays sample output from the show bgp neighbors command using the
inheritance keyword. The example shows that the neighbor inherits session parameters from neighbor
group GROUP_1, which in turn inherits from session group GROUP_2. The neighbor inherits IPv4
unicast parameters from address family group GROUP_3 and IPv4 multicast parameters from neighbor
group GROUP_1:
RP/0/RSP0/CPU0:router# show bgp neighbors 192.168.0.1 inheritance
Session:
n:GROUP_1 s:GROUP_2
IPv4 Unicast:
a:GROUP_3
IPv4 Multicast: n:GROUP_1
The following example displays sample output from the show bgp neighbors command using the
configuration keyword. The example shows from where each item of configuration was inherited, or if
it was configured directly on the neighbor (indicated by [ ]). For example, the ebgp-multihop 3
command was inherited from neighbor group GROUP_1 and the next-hop-self command was inherited
from the address family group GROUP_3:
RP/0/RSP0/CPU0:router# show bgp neighbors 192.168.0.1 configuration
neighbor 192.168.0.1
remote-as 2
advertisement-interval 15
ebgp-multihop 3
address-family ipv4 unicast
next-hop-self
route-policy POLICY_1
in
weight 200
address-family ipv4 multicast
default-originate
[]
[n:GROUP_1 s:GROUP_2]
[n:GROUP_1]
[]
[a:GROUP_3]
[a:GROUP_3]
[]
[n:GROUP_1]
[n:GROUP_1]
show bgp af-group

Use the show bgp af-group command to display address family groups:
Use the configuration keyword to display the effective configuration for the address family group,
including any settings that have been inherited from address family groups used by this address
family group.
OL-17300-01
RC-15

Use the inheritance keyword to display the address family groups from which this address family
group is capable of inheriting configuration.
Use the users keyword to display the neighbors, neighbor groups, and address family groups that
inherit configuration from this address family group.
The show bgp af-group sample commands that follow are based on this sample configuration:
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# remove-private-as
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# route-policy POLICY_1 in
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# use af-group GROUP_2
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# maximum-prefix 2500 75 warning-only
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# default-originate
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# send-community-ebgp
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# send-extended-community-ebgp
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# capability orf prefix both
The following example displays sample output from the show bgp af-group command using the
configuration keyword. This example shows from where each configuration item was inherited. The
default-originate command was configured directly on this address family group (indicated by [ ]). The
remove-private-as command was inherited from address family group GROUP_2, which in turn
inherited from address family group GROUP_3:
RP/0/RSP0/CPU0:router# show bgp af-group GROUP_1 configuration
af-group GROUP_1 address-family ipv4 unicast
capability orf prefix-list both
[a:GROUP_2]
default-originate
[]
maximum-prefix 2500 75 warning-only
[]
route-policy POLICY_1 in
[a:GROUP_2 a:GROUP_3]
remove-private-AS
[a:GROUP_2 a:GROUP_3]
send-community-ebgp
[a:GROUP_2]
send-extended-community-ebgp
[a:GROUP_2]
The following example displays sample output from the show bgp af-group command using the users
keyword:
RP/0/RSP0/CPU0:router# show bgp af-group GROUP_2 users
IPv4 Unicast: a:GROUP_1
The following example displays sample output from the show bgp af-group command using the
inheritance keyword. This shows that the specified address family group GROUP_1 directly uses the
GROUP_2 address family group, which in turn uses the GROUP_3 address family group:
RP/0/RSP0/CPU0:router# show bgp af-group GROUP_1 inheritance
IPv4 Unicast: a:GROUP_2 a:GROUP_3
show bgp session-group

Use the show bgp session-group command to display session groups:
Use the configuration keyword to display the effective configuration for the session group,
including any settings that have been inherited from session groups used by this session group.
RC-16
OL-17300-01

Use the inheritance keyword to display the session groups from which this session group is capable
of inheriting configuration.
Use the users keyword to display the session groups, neighbor groups, and neighbors that inherit
configuration from this session group.
The output from the show bgp session-group command is based on the following session group
configuration:
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# use session-group GROUP_2
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# update-source Loopback 0
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# use session-group GROUP_3
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# ebgp-multihop 2
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# dmz-link-bandwidth
The following is sample output from the show bgp session-group command with the configuration
keyword in EXEC mode:
RP/0/RSP0/CPU0:router# show bgp session-group GROUP_1 configuration
session-group GROUP_1
ebgp-multihop 2
[s:GROUP_2]
update-source Loopback0 []
dmz-link-bandwidth
[s:GROUP_2 s:GROUP_3]
The following is sample output from the show bgp session-group command with the inheritance
keyword showing that the GROUP_1 session group inherits session parameters from the GROUP_3 and
GROUP_2 session groups:
RP/0/RSP0/CPU0:router# show bgp session-group GROUP_1 inheritance
Session: s:GROUP_2 s:GROUP_3
The following is sample output from the show bgp session-group command with the users keyword
showing that both the GROUP_1 and GROUP_2 session groups inherit session parameters from the
GROUP_3 session group:
RP/0/RSP0/CPU0:router# show bgp session-group GROUP_3 users
Session: s:GROUP_1 s:GROUP_2
show bgp neighbor-group

Use the show bgp neighbor-group command to display neighbor groups:
Use the configuration keyword to display the effective configuration for the neighbor group,
including any settings that have been inherited from neighbor groups used by this neighbor group.
Use the inheritance keyword to display the address family groups, session groups, and neighbor
groups from which this neighbor group is capable of inheriting configuration.
Use the users keyword to display the neighbors and neighbor groups that inherit configuration from
this neighbor group.
The examples are based on the following group configuration:

OL-17300-01
RC-17

RP/0/RSP0/CPU0:router(config-bgp-afgrp)# remove-private-as
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# soft-reconfiguration inbound
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# send-community-ebgp
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# send-extended-community-ebgp
RP/0/RSP0/CPU0:router(config-bgp-afgrp)# capability orf prefix both
RP/0/RSP0/CPU0:router(config-bgp-sngrp)# timers 30 90
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# use neighbor-group GROUP_2
RP/0/RSP0/CPU0:router(config-nbrgrp)# exit
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)# use session-group GROUP_3
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# use af-group GROUP_2
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp-af)# weight 100
The following is sample output from the show bgp neighbor-group command with the configuration
keyword. The configuration setting source is shown to the right of each command. In the output shown
previously, the remote autonomous system is configured directly on neighbor group GROUP_1, and the
send community setting is inherited from neighbor group GROUP_2, which in turn inherits the setting
from address family group GROUP_3:
RP/0/RSP0/CPU0:router# show bgp neighbor-group GROUP_1 configuration
neighbor-group GROUP_1
remote-as 1982
timers 30 90
capability orf prefix-list both
remove-private-AS
send-community-ebgp
send-extended-community-ebgp
soft-reconfiguration inbound
weight 100
[]
[n:GROUP_2 s:GROUP_3]
[]
[n:GROUP_2 a:GROUP_2]
[n:GROUP_2 a:GROUP_2 a:GROUP_3]
[n:GROUP_2 a:GROUP_2 a:GROUP_3]
[n:GROUP_2]
The following is sample output from the show bgp neighbor-group command with the inheritance
keyword. This output shows that the specified neighbor group GROUP_1 inherits session (address
family-independent) configuration parameters from neighbor group GROUP_2. Neighbor group
GROUP_2 inherits its session parameters from session group GROUP_3. It also shows that the
GROUP_1 neighbor group inherits IPv4 unicast configuration parameters from the GROUP_2 neighbor
group, which in turn inherits them from the GROUP_2 address family group, which itself inherits them
from the GROUP_3 address family group:
RP/0/RSP0/CPU0:router# show bgp neighbor-group GROUP_1 inheritance
Session:
n:GROUP-2 s:GROUP_3
IPv4 Unicast: n:GROUP_2 a:GROUP_2 a:GROUP_3
The following is sample output from the show bgp neighbor-group command with the users keyword.
This output shows that the GROUP_1 neighbor group inherits session (address family-independent)
configuration parameters from the GROUP_2 neighbor group. The GROUP_1 neighbor group also
inherits IPv4 unicast configuration parameters from the GROUP_2 neighbor group:
RP/0/RSP0/CPU0:router# show bgp neighbor-group GROUP_2 users
RC-18
OL-17300-01

Session:
n:GROUP_1
IPv4 Unicast: n:GROUP_1
No Default Address Family

BGP does not support the concept of a default address family. An address family must be explicitly
configured under the BGP router configuration for the address family to be activated in BGP. Similarly,
an address family must be explicitly configured under a neighbor for the BGP session to be activated
under that address family. It is not required to have any address family configured under the BGP router
configuration level for a neighbor to be configured. However, it is a requirement to have an address
family configured at the BGP router configuration level for the address family to be configured under a
neighbor.
Routing Policy Enforcement

External BGP (eBGP) neighbors must have an inbound and outbound policy configured. If no policy is
configured, no routes are accepted from the neighbor, nor are any routes advertised to it. This added
security measure ensures that routes cannot accidentally be accepted or advertised in the case of a
configuration omission error.
Note
This enforcement affects only eBGP neighbors (neighbors in a different autonomous system than this
router). For internal BGP (iBGP) neighbors (neighbors in the same autonomous system), all routes are
accepted or advertised if there is no policy.
In the following example, for an eBGP neighbor, if all routes should be accepted and advertised with no
modifications, a simple pass-all policy is configured:
RP/0/RSP0/CPU0:router(config)# route-policy pass-all
RP/0/RSP0/CPU0:router(config-rpl)# pass
RP/0/RSP0/CPU0:router(config-rpl)# end-policy
RP/0/RSP0/CPU0:router(config)# commit
Use the route-policy (BGP) command in the neighbor address-family configuration mode to apply the
pass-all policy to a neighbor. The following example shows how to allow all IPv4 unicast routes to be
received from neighbor 192.168.40.42 and advertise all IPv4 unicast routes back to it:
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# route-policy pass-all in
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# route-policy pass-all out
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# commit
Use the show bgp summary command to display eBGP neighbors that do not have both an inbound and
outbound policy for every active address family. In the following example, such eBGP neighbors are
indicated in the output with an exclamation (!) mark:
RP/0/RSP0/CPU0:router# show bgp all all summary
Address Family: IPv4 Unicast
============================
BGP router identifier 10.0.0.1, local AS number 1
OL-17300-01
RC-19

BGP
BGP
BGP
BGP
generic scan interval 60 secs

main routing table version 41
scan interval 60 secs
is operating in STANDALONE mode.
Process
Speaker
RecvTblVer
41
Neighbor
10.0.101.1
10.0.101.2
Spk
0
0
bRIB/RIB
41
SendTblVer
41
AS MsgRcvd MsgSent
1
919
925
2
0
0
TblVer
41
0
InQ OutQ Up/Down St/PfxRcd

0
0 15:15:08
10
0
0 00:00:00 Idle
Address Family: IPv4 Multicast

==============================
BGP
BGP
BGP
BGP
BGP
router identifier 10.0.0.1, local AS number 1

Process
Speaker
RecvTblVer
1
bRIB/RIB
1
SendTblVer
1
Some configured eBGP neighbors do not have both inbound and

outbound policies configured for IPv4 Multicast address family.
These neighbors will default to sending and/or receiving no
routes and are marked with ! in the output below. Use the
show bgp neighbor <nbr_address> command for details.
Neighbor
10.0.101.2
Spk
0
AS MsgRcvd MsgSent
2
0
0
TblVer
0

0
0 00:00:00 Idle!
Address Family: IPv6 Unicast

============================
BGP
BGP
BGP
BGP
BGP

Process
Speaker
RecvTblVer
2
Neighbor
2222::2
2222::4
Spk
0
0
bRIB/RIB
2
SendTblVer
2
AS MsgRcvd MsgSent
2
920
918
3
0
0
TblVer
2
0

0
0 15:15:11
1
0
0 00:00:00 Idle
Address Family: IPv6 Multicast

==============================
BGP
BGP
BGP
BGP
BGP

Process
Speaker
RecvTblVer
1
bRIB/RIB
1
SendTblVer
1
RC-20
OL-17300-01

Some configured eBGP neighbors do not have both inbound and

outbound policies configured for IPv6 Multicast address family.
These neighbors will default to sending and/or receiving no
routes and are marked with ! in the output below. Use the
show bgp neighbor <nbr_address> command for details.
Neighbor
2222::2
2222::4
Spk
0
0
AS MsgRcvd MsgSent
2
920
918
3
0
0
TblVer
0
0

0
0 15:15:11
0
0
0 00:00:00 Idle!
Table Policy
The table policy feature in BGP allows you to configure traffic index values on routes as they are
installed in the global routing table. This feature is enabled using the table-policy command.
Table policy also provides the ability to drop routes from the RIB based on match criteria. This feature
can be useful in certain applications and should be used with caution as it can easily create a routing
black hole where BGP advertises routes to neighbors that BGP does not install in its global routing
table and forwarding table.
Update Groups
The BGP Update Groups feature contains an algorithm that dynamically calculates and optimizes update
groups of neighbors that share outbound policies and can share the update messages. The BGP Update
Groups feature separates update group replication from peer group configuration, improving
convergence time and flexibility of neighbor configuration.
To use this feature, you must understand the following concepts:
BGP Update Generation and Update Groups, page RC-21
BGP Update Group, page RC-21
BGP Update Generation and Update Groups

The BGP Update Groups feature separates BGP update generation from neighbor configuration. The
BGP Update Groups feature introduces an algorithm that dynamically calculates BGP update group
membership based on outbound routing policies. This feature does not require any configuration by the
network operator. Update group-based message generation occurs automatically and independently.
BGP Update Group

When a change to the configuration occurs, the router automatically recalculates update group
memberships and applies the changes.
For the best optimization of BGP update group generation, we recommend that the network operator
keeps outbound routing policy the same for neighbors that have similar outbound policies. This feature
contains commands for monitoring BGP update groups. For more information about the commands, see
the Monitoring BGP Update Groups section on page RC-122.
OL-17300-01
RC-21

BGP Cost Community

The BGP cost community is a nontransitive extended community attribute that is passed to internal BGP
(iBGP) and confederation peers but not to external BGP (eBGP) peers. The cost community feature
allows you to customize the local route preference and influence the best-path selection process by
assigning cost values to specific routes. The extended community format defines generic points of
insertion (POI) that influence the best-path decision at different points in the best-path algorithm.
The cost community attribute is applied to internal routes by configuring the set extcommunity cost
command in a route policy. See the Routing Policy Language Commands on
Cisco ASR 9000 Series Routers module of Cisco ASR 9000 Series Aggregation Services Router Routing
Command Reference for information on the set extcommunity cost command. The cost community set
clause is configured with a cost community ID number (0255) and cost community number
(04294967295). The cost community number determines the preference for the path. The path with the
lowest cost community number is preferred. Paths that are not specifically configured with the cost
community number are assigned a default cost community number of 2147483647 (the midpoint
between 0 and 4294967295) and evaluated by the best-path selection process accordingly. When two
paths have been configured with the same cost community number, the path selection process prefers the
path with the lowest cost community ID. The cost-extended community attribute is propagated to iBGP
peers when extended community exchange is enabled.
The following commands include the route-policy keyword, which you can use to apply a route policy
that is configured with the cost community set clause:
aggregate-address
redistribute
network
How BGP Cost Community Influences the Best Path Selection Process
The cost community attribute influences the BGP best-path selection process at the point of insertion
(POI). By default, the POI follows the Interior Gateway Protocol (IGP) metric comparison. When BGP
receives multiple paths to the same destination, it uses the best-path selection process to determine which
path is the best path. BGP automatically makes the decision and installs the best path in the routing table.
The POI allows you to assign a preference to a specific path when multiple equal cost paths are available.
If the POI is not valid for local best-path selection, the cost community attribute is silently ignored.
Cost communities are sorted first by POI then by community ID. Multiple paths can be configured with
the cost community attribute for the same POI. The path with the lowest cost community ID is
considered first. In other words, all cost community paths for a specific POI are considered, starting with
the one with the lowest cost community. Paths that do not contain the cost community cost (for the POI
and community ID being evaluated) are assigned the default community cost value (2147483647). If the
cost community values are equal, then cost community comparison proceeds to the next lowest
community ID for this POI.
To select the path with the lower cost community, simultaneously walk through the cost communities of
both paths. This is done by maintaining two pointers to the cost community chain, one for each path, and
advancing both pointers to the next applicable cost community at each step of the walk for the given POI,
in order of community ID, and stop when a best path is chosen or the comparison is a tie. At each step
of the walk, the following checks are done:
If neither pointer refers to a cost community,
Declare a tie;
Elseif a cost community is found for one path but not for the other,
Choose the path with cost community as best path;
RC-22
OL-17300-01

Elseif the Community ID from one path is less than the other,
Choose the path with the lesser Community ID as best path;
Elseif the Cost from one path is less than the other,
Choose the path with the lesser Cost as best path;
Else Continue.
Note
Paths that are not configured with the cost community attribute are considered by the best-path selection
process to have the default cost value (half of the maximum value [4294967295] or 2147483647).
Applying the cost community attribute at the POI allows you to assign a value to a path originated or
learned by a peer in any part of the local autonomous system or confederation. The cost community can
be used as a tie breaker during the best-path selection process. Multiple instances of the cost
community can be configured for separate equal cost paths within the same autonomous system or
confederation. For example, a lower cost community value can be applied to a specific exit path in a
network with multiple equal cost exit points, and the specific exit path is preferred by the BGP best-path
selection process. See the scenario described in the Influencing Route Preference in a Multiexit IGP
Network section on page RC-24.
Note
The cost community comparison in BGP is enabled by default. Use the bgp bestpath cost-community
ignore command to disable the comparison.
See the BGP Best Path Algorithm section on page RC-26 for information on the BGP best-path
selection process.
Cost Community Support for Aggregate Routes and Multipaths

The BGP cost community feature supports aggregate routes and multipaths. The cost community
attribute can be applied to either type of route. The cost community attribute is passed to the aggregate
or multipath route from component routes that carry the cost community attribute. Only unique IDs are
passed, and only the highest cost of any individual component route is applied to the aggregate for each
ID. If multiple component routes contain the same ID, the highest configured cost is applied to the route.
For example, the following two component routes are configured with the cost community attribute
using an inbound route policy:
10.0.0.1
POI=IGP
cost community ID=1
cost number=100
192.168.0.1
POI=IGP
cost community ID=1
cost number=200
If these component routes are aggregated or configured as a multipath, the cost value 200 is advertised,
because it has the highest cost.
OL-17300-01
RC-23

If one or more component routes do not carry the cost community attribute or the component routes are
configured with different IDs, then the default value (2147483647) is advertised for the aggregate or
multipath route. For example, the following three component routes are configured with the cost
community attribute using an inbound route policy. However, the component routes are configured with
two different IDs.
10.0.0.1
POI=IGP
cost community ID=1
cost number=100
172.16.0.1
POI=IGP
cost community ID=2
cost number=100
192.168.0.1
POI=IGP
cost community ID=1
cost number=200
The single advertised path includes the aggregate cost communities as follows:
{POI=IGP, ID=1, Cost=2147483647} {POI-IGP, ID=2, Cost=2147483647}
Influencing Route Preference in a Multiexit IGP Network

Figure 1 shows an IGP network with two autonomous system boundary routers (ASBRs) on the edge.
Each ASBR has an equal cost path to network 10.8/16.
ISP2 PE1
Multiexit Point IGP Network
ASBR2
ASBR1
172.19.20/24
ISP1 PE1
10.8/16
ISP2 PE2
ISP1 PE2
172.19.20/24
10.8/16
89045
Figure 1
Both paths are considered to be equal by BGP. If multipath loadsharing is configured, both paths to the
routing table are installed and are used to balance the load of traffic. If multipath load balancing is not
configured, the BGP selects the path that was learned first as the best path and installs this path to the
routing table. This behavior may not be desirable under some conditions. For example, the path is
learned from ISP1 PE2 first, but the link between ISP1 PE2 and ASBR1 is a low-speed link.
RC-24
OL-17300-01

The configuration of the cost community attribute can be used to influence the BGP best-path selection
process by applying a lower-cost community value to the path learned by ASBR2. For example, the
following configuration is applied to ASBR2:
RP/0/RSP0/CPU0:router(config)# route-policy ISP2_PE1
RP/0/RSP0/CPU0:router(config-rpl)# set extcommunity cost (1:1)
The preceding route policy applies a cost community number of 1 to the 10.8.0.0 route. By default, the
path learned from ASBR1 is assigned a cost community number of 2147483647. Because the path
learned from ASBR2 has a lower-cost community number, the path is preferred.
BGP Cost Community Support for EIGRP MPLS VPN PE-CE with Back-door Links
Back-door links in an EIGRP MPLS VPN topology is preferred by BGP if the back-door link is learned
first. (A back-door link, or route, is a connection that is configured outside of the VPN between a remote
and main site; for example, a WAN leased line that connects a remote site to the corporate network.)
The prebest path point of insertion (POI) in the BGP cost community feature supports mixed EIGRP
VPN network topologies that contain VPN and back-door links. This POI is applied automatically to
EIGRP routes that are redistributed into BGP. The prebest path POI carries the EIGRP route type and
metric. This POI influences the best-path calculation process by influencing BGP to consider the POI
before any other comparison step. No configuration is required. This feature is enabled automatically for
EIGRP VPN sites when Cisco IOS XR software is installed on a PE, CE, or back-door router.
For information about configuring EIGRP MPLS VPNs, see the Cisco ASR 9000 Series
Aggregation Services Router MPLS Configuration Guide.
Figure 2 shows how cost community can be used to support backdoor links in a network.
Network Showing How Cost Community Can be Used to Support Backdoor Links
ISP2 PE1
ASBR2
ASBR1
172.19.20/24
ISP1 PE1
10.8/16
ISP2 PE2
ISP1 PE2
172.19.20/24
10.8/16
89045
Figure 2
The following sequence of events happens in PE1:

1.
PE1 learns IPv4 prefix 10.1.1.0/24 from CE1 through EIGRP running a virtual routing and
forwarding (VRF) instance. EIGRP selects and installs the best path in the RIB. It also encodes
the cost-extended community and adds the information to the RIB.
2.
The route is redistributed into BGP (assuming that IGP-to-BGP redistribution is configured).
BGP also receives the cost-extended community from the route through the redistribution
process.
3.
After BGP has determined the best path for the newly redistributed prefix, the path is advertised
to PE peers (PE2).
OL-17300-01
RC-25

4.
PE2 receives the BGP VPNv4 prefix route_distinguisher:10.1.1.0/24 along with the cost
community. It is likely that CE2 advertises the same prefix (because of the back-door link
between CE1 and CE2) to PE2 through EIGRP. PE2 BGP would have already learned the CE
route through the redistribution process along with the cost community value.
5.
PE2 has two paths within BGP: one with cost community cost1 through multipath BGP (PE1)
and another with cost community cost2 through the EIGRP neighbor (CE2).
6.
PE2 runs the enhanced BGP best-path calculation.
7.
PE2 installs the best path in the RIB passing the appropriate cost community value.
8.
PE2 RIB has two paths for 10.1.1.0/24: one with cost community cost2 added by EIGRP and
another with the cost community cost1 added by BGP. Because both the route paths have cost
community, RIB compares the costs first. The BGP path has the lower cost community, so it is
selected and downloaded to the RIB.
9.
PE2 RIB redistributes the BGP path into EIGRP with VRF. EIGRP runs a diffusing update
algorithm (DUAL) because there are two paths, and selects the BGP-redistributed path.
10.
PE2 EIGRP advertises the path to CE2 making the path the next hop for the prefix to send the
traffic over the MPLS network.
Adding Routes to the Routing Information Base

If a nonsourced path becomes the best path after the best-path calculation, BGP adds the route to the
Routing Information Base (RIB) and passes the cost communities along with the other IGP extended
communities.
When a route with paths is added to the RIB by a protocol, RIB checks the current best paths for the
route and the added paths for cost extended communities. If cost-extended communities are found, the
RIB compares the set of cost communities. If the comparison does not result in a tie, the appropriate best
path is chosen. If the comparison results in a tie, the RIB proceeds with the remaining steps of the
best-path algorithm. If a cost community is not present in either the current best paths or added paths,
then the RIB continues with the remaining steps of the best-path algorithm. See the BGP Best Path
Algorithm section on page RC-26 for information on the BGP best-path algorithm.
BGP Best Path Algorithm

BGP routers typically receive multiple paths to the same destination. The BGP best-path algorithm
determines the best path to install in the IP routing table and to use for forwarding traffic. This section
describes the Cisco IOS XR software implementation of BGP best-path algorithm, as specified in
Section 9.1 of the Internet Engineering Task Force (IETF) Network Working Group
draft-ietf-idr-bgp4-24.txt document.
The BGP best-path algorithm implementation is in three parts:
Part 1Compares two paths to determine which is better.
Part 2Iterates over all paths and determines which order to compare the paths to select the overall
best path.
Part 3Determines whether the old and new best paths differ enough so that the new best path
should be used.
RC-26
OL-17300-01

Note
The order of comparison determined by Part 2 is important because the comparison operation is not
transitive; that is, if three paths, A, B, and C exist, such that when A and B are compared, A is better,
and when B and C are compared, B is better, it is not necessarily the case that when A and C are
compared, A is better. This nontransitivity arises because the multi exit discriminator (MED) is
compared only among paths from the same neighboring autonomous system (AS) and not among all
paths.
Comparing Pairs of Paths

The following steps are completed to compare two paths and determine the better path:
1.
If either path is invalid (for example, a path has the maximum possible MED value or it has an
unreachable next hop), then the other path is chosen (provided that the path is valid).
2.
If the paths have unequal pre-bestpath cost communities, the path with the lower pre-bestpath cost
community is selected as the best path.
Note
3.
Note
See the BGP Cost Community section on page RC-22 for details on how cost communities are
compared.
If the paths have unequal weights, the path with the highest weight is chosen.
The weight is entirely local to the router, and can be set with the weight command or using a
routing policy.
4.
If the paths have unequal local preferences, the path with the higher local preference is chosen. Note:
If a local preference attribute was received with the path or was set by a routing policy, then that
value is used in this comparison. Otherwise, the default local preference value of 100 is used. The
default value can be changed using the bgp default local-preference command.
5.
If one of the paths is a redistributed path, which results from a redistribute or network command,
then it is chosen. Otherwise, if one of the paths is a locally generated aggregate, which results from
an aggregate-address command, it is chosen.
Note
6.
Note
Step 1 through Step 4 implement the Degree of Preference calculation from Section 9.1.1 of
draft-ietf-idr-bgp4-24.txt.
If the paths have unequal AS path lengths, the path with the shorter AS path is chosen. This step is
skipped if bgp bestpath as-path ignore command is configured.
When calculating the length of the AS path, confederation segments are ignored, and AS sets
count as 1. (See Section 9.1.2.2a of draft-ietf-idr-bgp4-24.txt.)
7.
If the paths have different origins, the path with the lower origin is selected. Interior Gateway
Protocol (IGP) is considered lower than EGP, which is considered lower than INCOMPLETE. (See
Section 9.1.2.2b of draft-ietf-idr-bgp4-24.txt.)
8.
If appropriate, the MED of the paths is compared. If they are unequal, the path with the lower MED
is chosen.
OL-17300-01
RC-27

A number of configuration options exist that affect whether or not this step is performed. In general,
the MED is compared if both paths were received from neighbors in the same AS; otherwise the
MED comparison is skipped. However, this behavior is modified by certain configuration options,
and there are also some corner cases to consider. (See Section 9.1.2.2c of draft-ietf-idr-bgp4-24.txt.)
If the bgp bestpath med always command is configured, then the MED comparison is always
performed, regardless of neighbor AS in the paths. Otherwise, MED comparison depends on the AS
paths of the two paths being compared, as follows:
a. If a path has no AS path or the AS path starts with an AS_SET, then the path is considered to
be internal, and the MED is compared with other internal paths.

b. If the AS path starts with an AS_SEQUENCE, then the neighbor AS is the first AS number in
the sequence, and the MED is compared with other paths that have the same neighbor AS.
c. If the AS path contains only confederation segments or starts with confederation segments
followed by an AS_SET, then the MED is not compared with any other path unless the bgp
bestpath med confed command is configured. In that case, the path is considered internal and
the MED is compared with other internal paths.
d. If the AS path starts with confederation segments followed by an AS_SEQUENCE, then the
neighbor AS is the first AS number in the AS_SEQUENCE, and the MED is compared with
other paths that have the same neighbor AS.
Note
9.
If no MED attribute was received with the path, then the MED is considered to be 0 unless the
bgp bestpath med missing-as-worst command is configured. In that case, if no MED attribute
was received, the MED is considered to be the highest possible value.
If one path is received from an external peer and the other is received from an internal (or
confederation) peer, the path from the external peer is chosen. (See Section 9.1.2.2d of
draft-ietf-idr-bgp4-24.txt.)
10. If the paths have different IGP metrics to their next hops, the path with the lower IGP metric is
chosen. (See Section 9.1.2.2e of draft-ietf-idr-bgp4-24.txt.)

11. If the paths have unequal IP cost communities, the path with the lower IP cost community is selected
as the best path.
Note
See the BGP Cost Community section on page RC-22 for details on how cost communities are
compared.
12. If all path parameters in Step 1 through Step 10 are the same, then the router IDs are compared. If
the path was received with an originator attribute, then that is used as the router ID to compare;
otherwise, the router ID of the neighbor from which the path was received is used. If the paths have
different router IDs, the path with the lower router ID is chosen.
Note
Where the originator is used as the router ID, it is possible to have two paths with the same router
ID. It is also possible to have two BGP sessions with the same peer router, and therefore receive
two paths with the same router ID. (See Section 9.1.2.2f of draft-ietf-idr-bgp4-24.txt.)
13. If the paths have different cluster lengths, the path with the shorter cluster length is selected. If a
path was not received with a cluster list attribute, it is considered to have a cluster length of 0.
RC-28
OL-17300-01

14. Finally, the path received from the neighbor with the lower IP address is chosen. Locally generated
paths (for example, redistributed paths) are considered to have a neighbor IP address of 0. (See
Section 9.1.2.2g of draft-ietf-idr-bgp4-24.txt.)
Order of Comparisons
The second part of the BGP best-path algorithm implementation determines the order in which the paths
should be compared. The order of comparison is determined as follows:
1.
The paths are partitioned into groups such that within each group the MED can be compared among
all paths. The same rules as in the Comparing Pairs of Paths section on page RC-27 are used to
determine whether MED can be compared between any two paths. Normally, this comparison results
in one group for each neighbor AS. If the bgp bestpath med always command is configured, then
there is just one group containing all the paths.
2.
The best path in each group is determined. Determining the best path is achieved by iterating through
all paths in the group and keeping track of the best one seen so far. Each path is compared with the
best-so-far, and if it is better, it becomes the new best-so-far and is compared with the next path in
the group.
3.
A set of paths is formed containing the best path selected from each group in Step 2. The overall
best path is selected from this set of paths, by iterating through them as in Step 2.
Best Path Change Suppression

The third part of the implementation is to determine whether the best-path change can be suppressed or
notwhether the new best path should be used, or continue using the existing best path. The existing
best path can continue to be used if the new one is identical to the point at which the best-path selection
algorithm becomes arbitrary (if the router-id is the same). Continuing to use the existing best path can
avoid churn in the network.
Note
This suppression behavior does not comply with the IETF Networking Working Group
draft-ietf-idr-bgp4-24.txt document, but is specified in the IETF Networking Working Group
draft-ietf-idr-avoid-transition-00.txt document.
The suppression behavior can be turned off by configuring the bgp bestpath compare-routerid
command. If this command is configured, the new best path is always preferred to the existing one.
Otherwise, the following steps are used to determine whether the best-path change can be suppressed:
1.
If the existing best path is no longer valid, the change cannot be suppressed.
2.
If either the existing or new best paths were received from internal (or confederation) peers or were
locally generated (for example, by redistribution), then the change cannot be suppressed. That is,
suppression is possible only if both paths were received from external peers.
3.
If the paths were received from the same peer (the paths would have the same router-id), the change
cannot be suppressed. The router ID is calculated using rules in the Comparing Pairs of Paths
section on page RC-27.
4.
If the paths have different weights, local preferences, origins, or IGP metrics to their next hops, then
the change cannot be suppressed. Note that all these values are calculated using the rules in the
Comparing Pairs of Paths section on page RC-27.
OL-17300-01
RC-29

5.
If the paths have different-length AS paths and the bgp bestpath as-path ignore command is not
configured, then the change cannot be suppressed. Again, the AS path length is calculated using the
rules in the Comparing Pairs of Paths section on page RC-27.
6.
If the MED of the paths can be compared and the MEDs are different, then the change cannot be
suppressed. The decision as to whether the MEDs can be compared is exactly the same as the rules
in the Comparing Pairs of Paths section on page RC-27, as is the calculation of the MED value.
7.
If all path parameters in Step 1 through Step 6 do not apply, the change can be suppressed.
Administrative Distance
An administrative distance is a rating of the trustworthiness of a routing information source. In general,
the higher the value, the lower the trust rating. For information on specifying the administrative distance
for BGP, see the BGP Commands on Cisco ASR 9000 Series Routers module of the
Cisco ASR 9000 Series Aggregation Services Router Routing Command Reference.
Normally, a route can be learned through more than one protocol. Administrative distance is used to
discriminate between routes learned from more than one protocol. The route with the lowest
administrative distance is installed in the IP routing table. By default, BGP uses the administrative
distances shown in Table 1.
Table 1
Note
BGP Default Administrative Distances
Distance
Default Value
Function
External
20
Applied to routes learned from eBGP.
Internal
200
Applied to routes learned from iBGP.
Local
200
Applied to routes originated by the router.
Distance does not influence the BGP path selection algorithm, but it does influence whether
BGP-learned routes are installed in the IP routing table.
In most cases, when a route is learned through eBGP, it is installed in the IP routing table because of its
distance (20). Sometimes, however, two ASs have an IGP-learned back-door route and an eBGP-learned
route. Their policy might be to use the IGP-learned path as the preferred path and to use the
eBGP-learned path when the IGP path is down. See Figure 3.
RC-30
OL-17300-01

Figure 3
Back Door Example
AS 200
160.10.0.0
AS 100
150.10.0.0
IGP
Router A
Router B
2.2.2.2
3.3.3.3
eBGP
eBGP
AS 300
170.10.0.0
3.3.3.1
Router C
149547
2.2.2.1
In Figure 3, Routers A and C and Routers B and C are running eBGP. Routers A and B are running an
IGP (such as Routing Information Protocol [RIP], Interior Gateway Routing Protocol [IGRP], Enhanced
IGRP, or Open Shortest Path First [OSPF]). The default distances for RIP, IGRP, Enhanced IGRP, and
OSPF are 120, 100, 90, and 110, respectively. All these distances are higher than the default distance of
eBGP, which is 20. Usually, the route with the lowest distance is preferred.
Router A receives updates about 160.10.0.0 from two routing protocols: eBGP and IGP. Because the
default distance for eBGP is lower than the default distance of the IGP, Router A chooses the
eBGP-learned route from Router C. If you want Router A to learn about 160.10.0.0 from Router B (IGP),
establish a BGP back door. See Indicating BGP Back-door Routes section on page RC-55.
In the following example, a network back door is configured:
RP/0/RSP0/CPU0:router(config-bgp)# address-family ipv4 unicast
RP/0/RSP0/CPU0:router(config-bgp-af)# network 160.10.0.0/16 backdoor
Router A treats the eBGP-learned route as local and installs it in the IP routing table with a distance of
200. The network is also learned through Enhanced IGRP (with a distance of 90), so the Enhanced IGRP
route is successfully installed in the IP routing table and is used to forward traffic. If the Enhanced
IGRP-learned route goes down, the eBGP-learned route is installed in the IP routing table and is used to
forward traffic.
Although BGP treats network 160.10.0.0 as a local entry, it does not advertise network 160.10.0.0 as it
normally would advertise a local entry.
Multiprotocol BGP
Multiprotocol BGP is an enhanced BGP that carries routing information for multiple network layer
protocols and IP multicast routes. BGP carries two sets of routes, one set for unicast routing and one set
for multicast routing. The routes associated with multicast routing are used by the Protocol Independent
Multicast (PIM) feature to build data distribution trees.
Multiprotocol BGP is useful when you want a link dedicated to multicast traffic, perhaps to limit which
resources are used for which traffic. Multiprotocol BGP allows you to have a unicast routing topology
different from a multicast routing topology providing more control over your network and resources.
OL-17300-01
RC-31

In BGP, the only way to perform interdomain multicast routing was to use the BGP infrastructure that
was in place for unicast routing. Perhaps you want all multicast traffic exchanged at one network access
point (NAP). If those routers were not multicast capable, or there were differing policies for which you
wanted multicast traffic to flow, multicast routing could not be supported without multiprotocol BGP.
Note
It is possible to configure BGP peers that exchange both unicast and multicast network layer reachability
information (NLRI), but you cannot connect multiprotocol BGP clouds with a BGP cloud. That is, you
cannot redistribute multiprotocol BGP routes into BGP.
Figure 4 illustrates simple unicast and multicast topologies that are incongruent, and therefore are not
possible without multiprotocol BGP.
Autonomous systems 100, 200, and 300 are each connected to two NAPs that are FDDI rings. One is
used for unicast peering (and therefore the exchange of unicast traffic). The Multicast Friendly
Interconnect (MFI) ring is used for multicast peering (and therefore the exchange of multicast traffic).
Each router is unicast and multicast capable.
Figure 4
Noncongruent Unicast and Multicast Routes

FDDI
FDDI
Unicast
MFI
AS 200
AS 300
ISP A
ISP B
ISP C
12238
AS 100
Figure 5 is a topology of unicast-only routers and multicast-only routers. The two routers on the left are
unicast-only routers (that is, they do not support or are not configured to perform multicast routing). The
two routers on the right are multicast-only routers. Routers A and B support both unicast and multicast
routing. The unicast-only and multicast-only routers are connected to a single NAP.
In Figure 5, only unicast traffic can travel from Router A to the unicast routers to Router B and back.
Multicast traffic could not flow on that path, so another routing table is required. Multicast traffic uses
the path from Router A to the multicast routers to Router B and back.
Figure 5 illustrates a multiprotocol BGP environment with a separate unicast route and multicast route
from Router A to Router B. Multiprotocol BGP allows these routes to be incongruent. Both of the
autonomous systems must be configured for internal multiprotocol BGP (IMBGP) in the figure.
A multicast routing protocol, such as PIM, uses the multicast BGP database to perform Reverse Path
Forwarding (RPF) lookups for multicast-capable sources. Thus, packets can be sent and accepted on the
multicast topology but not on the unicast topology.
RC-32
OL-17300-01

Figure 5
Multicast BGP Environment

Router B
AS 200
Unicast
router
IMBGP
Multicast
router
NAP
Unicast
router
IMBGP
Multicast
router
AS 100
Unicast route
Router A
11754
Multicast route
Route Dampening
Route dampening is a BGP feature that minimizes the propagation of flapping routes across an
internetwork. A route is considered to be flapping when it is repeatedly available, then unavailable, then
available, then unavailable, and so on.
For example, consider a network with three BGP autonomous systems: autonomous system 1,
autonomous system 2, and autonomous system 3. Suppose the route to network A in autonomous system
1 flaps (it becomes unavailable). Under circumstances without route dampening, the eBGP neighbor of
autonomous system 1 to autonomous system 2 sends a withdraw message to autonomous system 2. The
border router in autonomous system 2, in turn, propagates the withdrawal message to autonomous
system 3. When the route to network A reappears, autonomous system 1 sends an advertisement message
to autonomous system 2, which sends it to autonomous system 3. If the route to network A repeatedly
becomes unavailable, then available, many withdrawal and advertisement messages are sent. Route
flapping is a problem in an internetwork connected to the Internet, because a route flap in the Internet
backbone usually involves many routes.
Minimizing Flapping
The route dampening feature minimizes the flapping problem as follows. Suppose again that the route
to network A flaps. The router in autonomous system 2 (in which route dampening is enabled) assigns
network A a penalty of 1000 and moves it to history state. The router in autonomous system 2 continues
OL-17300-01
RC-33

to advertise the status of the route to neighbors. The penalties are cumulative. When the route flaps so
often that the penalty exceeds a configurable suppression limit, the router stops advertising the route to
network A, regardless of how many times it flaps. Thus, the route is dampened.
The penalty placed on network A is decayed until the reuse limit is reached, upon which the route is once
again advertised. At half of the reuse limit, the dampening information for the route to network A is
removed.
Note
No penalty is applied to a BGP peer reset when route dampening is enabled, even though the reset
withdraws the route.
BGP Routing Domain Confederation

One way to reduce the iBGP mesh is to divide an autonomous system into multiple subautonomous
systems and group them into a single confederation. To the outside world, the confederation looks like
a single autonomous system. Each autonomous system is fully meshed within itself and has a few
connections to other autonomous systems in the same confederation. Although the peers in different
autonomous systems have eBGP sessions, they exchange routing information as if they were iBGP peers.
Specifically, the next hop, MED, and local preference information is preserved. This feature allows you
to retain a single IGP for all of the autonomous systems.
BGP Route Reflectors

BGP requires that all iBGP speakers be fully meshed. However, this requirement does not scale well
when there are many iBGP speakers. Instead of configuring a confederation, you can reduce the iBGP
mesh by using a route reflector configuration.
Figure 6 illustrates a simple iBGP configuration with three iBGP speakers (routers A, B, and C). Without
route reflectors, when Router A receives a route from an external neighbor, it must advertise it to both
routers B and C. Routers B and C do not readvertise the iBGP learned route to other iBGP speakers
because the routers do not pass on routes learned from internal neighbors to other internal neighbors,
thus preventing a routing information loop.
RC-34
OL-17300-01

Figure 6
Three Fully Meshed iBGP Speakers
Fully meshed
autonomous
system
Router C
Routes
Router A
Routes
advertised
External
BGP
speaker
Routes not
advertised
Router A
Routes
S4217
Router B
With route reflectors, all iBGP speakers need not be fully meshed because there is a method to pass
learned routes to neighbors. In this model, an iBGP peer is configured to be a route reflector responsible
for passing iBGP learned routes to a set of iBGP neighbors. In Figure 7, Router B is configured as a route
reflector. When the route reflector receives routes advertised from Router A, it advertises them to
Router C, and vice versa. This scheme eliminates the need for the iBGP session between routers A
and C.
Figure 7
Simple BGP Model with a Route Reflector
Partially meshed autonomous system
Routes
Router A
Router C
External
BGP
speaker
Routes
Reflected
routes
S4219
Router A
Router B
Route
reflector
OL-17300-01
RC-35

The internal peers of the route reflector are divided into two groups: client peers and all other routers in
the autonomous system (nonclient peers). A route reflector reflects routes between these two groups.
The route reflector and its client peers form a cluster. The nonclient peers must be fully meshed with
each other, but the client peers need not be fully meshed. The clients in the cluster do not communicate
with iBGP speakers outside their cluster.
Figure 8 illustrates a more complex route reflector scheme. Router A is the route reflector in a cluster
with routers B, C, and D. Routers E, F, and G are fully meshed, nonclient routers.
When the route reflector receives an advertised route, depending on the neighbor, it takes the following
actions:
A route from an external BGP speaker is advertised to all clients and nonclient peers.
A route from a nonclient peer is advertised to all clients.
A route from a client is advertised to all clients and nonclient peers. Hence, the clients need not be
fully meshed.
Figure 8
More Complex BGP Route Reflector Model
Partially meshed
autonomous system
Nonclient
Router G
Route reflector
Router A
Routes
advertised
Nonclient
Router F
Router A
External
BGP
speaker
Nonclient
Cluster
S4218
Router E
Router B
Client
Router C
Client
Router D
Client
Along with route reflector-aware BGP speakers, it is possible to have BGP speakers that do not
understand the concept of route reflectors. They can be members of either client or nonclient groups,
allowing an easy and gradual migration from the old BGP model to the route reflector model. Initially,
you could create a single cluster with a route reflector and a few clients. All other iBGP speakers could
be nonclient peers to the route reflector and then more clusters could be created gradually.
An autonomous system can have multiple route reflectors. A route reflector treats other route reflectors
just like other iBGP speakers. A route reflector can be configured to have other route reflectors in a client
group or nonclient group. In a simple configuration, the backbone could be divided into many clusters.
RC-36
OL-17300-01

Each route reflector would be configured with other route reflectors as nonclient peers (thus, all route
reflectors are fully meshed). The clients are configured to maintain iBGP sessions with only the route
reflector in their cluster.
Usually, a cluster of clients has a single route reflector. In that case, the cluster is identified by the router
ID of the route reflector. To increase redundancy and avoid a single point of failure, a cluster might have
more than one route reflector. In this case, all route reflectors in the cluster must be configured with the
cluster ID so that a route reflector can recognize updates from route reflectors in the same cluster. All
route reflectors serving a cluster should be fully meshed and all of them should have identical sets of
client and nonclient peers.
By default, the clients of a route reflector are not required to be fully meshed and the routes from a client
are reflected to other clients. However, if the clients are fully meshed, the route reflector need not reflect
routes to clients.
As the iBGP learned routes are reflected, routing information may loop. The route reflector model has
the following mechanisms to avoid routing loops:
Originator ID is an optional, nontransitive BGP attribute. It is a 4-byte attributed created by a route

reflector. The attribute carries the router ID of the originator of the route in the local autonomous
system. Therefore, if a misconfiguration causes routing information to come back to the originator,
the information is ignored.
Cluster-list is an optional, nontransitive BGP attribute. It is a sequence of cluster IDs that the route
has passed. When a route reflector reflects a route from its clients to nonclient peers, and vice versa,
it appends the local cluster ID to the cluster-list. If the cluster-list is empty, a new cluster-list is
created. Using this attribute, a route reflector can identify if routing information is looped back to
the same cluster due to misconfiguration. If the local cluster ID is found in the cluster-list, the
advertisement is ignored.
Default Address Family for show Commands

Most of the show commands provide address family (AFI) and subaddress family (SAFI) arguments (see
RFC 1700 and RFC 2858 for information on AFI and SAFI). The Cisco IOS XR software parser provides
the ability to set the afi and safi so that it is not necessary to specify them while running a show
command. The parser commands are:
set default-afi {ipv4 | ipv6 | all}
set default-safi {unicast | multicast | all}
The parser automatically sets the default afi value to ipv4 and default safi value to unicast. It is
necessary to use only the parser commands to change the default afi value from ipv4 or default safi value
from unicast. Any afi or safi keyword specified in a show command overrides the values set using the
parser commands. Use the following command to check the currently set value of the afi and safi:
show default-afi-safi-vrf
Distributed BGP
Distributed BGP splits BGP functionality into three process types:
BGP process managerResponsible for verifying configuration changes and for calculating and
publishing the distribution of neighbors among BGP speaker processes.
There is a single instance of this process.
OL-17300-01
RC-37

bRIB processResponsible for performing the best-path calculation of routes (receives partial best
paths from the speaker). The best route is installed into the bRIB and is advertised back to all
speakers. See the BGP Best Path Algorithm section on page RC-26 for information on best-path
calculation. The bRIB process is also responsible for installing routes in the RIB, and for handling
routes redistributed from the RIB. To accommodate route leaking from one RIB to another, bRIB
may register for redistribution from multiple RIB routes into a single route in the bRIB process.
There is a single instance of this process for each address family.
BGP speaker processResponsible for handling all BGP connections to peers. The speaker stores
received paths in the RIB and performs a partial best-path calculation, advertising the partial best
paths to the bRIB (limited best-path calculation). Speakers perform a limited best-path calculation
because to compare MEDs, paths need to be compared from the same AS but may not be received
on the same speaker. Because BGP speakers do not have access to the entire BGP local RIB, BGP
speakers can perform only a limited best-path calculation. (These are Step 1 through Step 7 in the
BGP Best Path Algorithm section on page RC-26.) Only the best paths are advertised to the bRIB
to reduce speaker/bRIB interprocess communications (IPC) and to reduce the number of paths to be
processed in the bRIB. BGP speakers can only mark a path as active only after learning the result of
the full best-path calculation from the bRIB. Neighbor import and export policies are imposed by
the speaker.
If the bgp bestpath med always command is enabled, complete best-path calculation happens
inside speaker process. When the bgp bestpath med always command is not enabled, speakers
calculate partial best paths only (performs the best-path steps up to the MED comparison) and send
them to bRIB. bRIB calculates the final best path (performs all the steps in the best-path
calculation). When the bgp bestpath med always command is enabled, speakers can compare the
MED across all ASs, allowing the speaker to calculate a single best path to send it to bRIB. bRIB is
the ultimate process that calculates the final best path, but when the bgp bestpath med always
command is enabled, the speakers send a single best path instead of potentially sending multiple
partial best paths.
There are multiple instances of this process in which each instance is responsible for a subset of BGP
peer connections.
Up to a total 15 speakers for all address families and one bRIB for each address family (IPv4, IPv6, and
VPNv4) are supported.
Distributed BGP is used to reduce the impact that a fault in one address family has on another address
family. For example, you can have one speaker with only IPv6 neighbors (peering to IPv6 addresses) and
a separate speaker with only IPv4 neighbors (peering to IPv4 addresses), and yet another speaker with
only VPNv4 provider edge (PE) or customer edge (CE) neighbors (peering to IPv4 addresses distinct
from the non-VPN neighbors). In this scenario, there is no overlap in processes (bgp, brib, and rib)
between IPv4, IPv6, and VPNv4. Therefore, a bgp, brib, or rib process crash affects only one address
family. Distributed BGP also allows more CPU capacity for receiving, computing, and sending BGP
routing updates. When in distributed BGP mode, you can control the number of distributed speakers that
are enabled, as well as which neighbors are assigned to each speaker. If no distributed speakers are
enabled, BGP operates in standalone mode. If at least one distributed speaker is enabled, BGP operates
in distributed mode.
MPLS VPN Carrier Supporting Carrier

Carrier supporting carrier (CSC) is a term used to describe a situation in which one service provider
allows another service provider to use a segment of its backbone network. The service provider that
provides the segment of the backbone network to the other provider is called the backbone carrier. The
service provider that uses the segment of the backbone network is called the customer carrier.
RC-38
OL-17300-01

How to Implement BGP
A backbone carrier offers BGP/MPLS VPN services. The customer carrier can be either:
An Internet service provider (ISP) (By definition, an ISP does not provide VPN service.)
A BGP/MPLS VPN service provider
You can configure a CSC network to enable BGP to transport routes and MPLS labels between the
backbone carrier PE routers and the customer carrier CE routers using multiple paths. The benefits of
using BGP to distribute IPv4 routes and MPLS label routes are:
BGP takes the place of an Interior Gateway Protocol (IGP) and Label Distribution Protocol (LDP)
in a VPN routing and forwarding (VRF) table. You can use BGP to distribute routes and MPLS
labels. Using a single protocol instead of two simplifies the configuration and troubleshooting.
BGP is the preferred routing protocol for connecting two ISPs, mainly because of its routing policies
and ability to scale. ISPs commonly use BGP between two providers. This feature enables those
ISPs to use BGP.
For detailed information on configuring MPLS VPN CSC with BGP, see the Implementing MPLS
Layer 3 VPNs on Cisco ASR 9000 Series Routers module of the Cisco ASR 9000 Series
Aggregation Services Router MPLS Configuration Guide.
BGP Keychains
BGP keychains enable keychain authentication between two BGP peers. The BGP endpoints must both
comply with draft-bonica-tcp-auth-05.txt and a keychain on one endpoint and a password on the other
endpoint does not work.
See the Cisco ASR 9000 Series Aggregation Services Router System Security Guide for information on
keychain management.
BGP is able to use the keychain to implement hitless key rollover for authentication. The key rollover
specification is time based, and in the event of clock skew between the peers, the rollover process is
impacted. The configurable tolerance specification allows for the accept window to be extended (before
and after) by that margin. This accept window facilitates a hitless key rollover for applications (for
example, routing and management protocols).
The key rollover does not impact the BGP session, unless there is a keychain configuration mismatch at
the endpoints resulting in no common keys for the session traffic (send or accept).

This section contains instructions for the following tasks:
Enabling BGP Routing, page RC-41 (required)
Configuring a Routing Domain Confederation for BGP, page RC-44 (optional)
Resetting an eBGP Session Immediately Upon Link Failure, page RC-46 (optional)
Logging Neighbor Changes, page RC-46 (optional)
Adjusting BGP Timers, page RC-47 (optional)
Changing the BGP Default Local Preference Value, page RC-48 (optional)
Configuring the MED Metric for BGP, page RC-50 (optional)
Configuring BGP Weights, page RC-51 (optional)
Tuning the BGP Best-Path Calculation, page RC-53 (optional)
OL-17300-01
RC-39

Indicating BGP Back-door Routes, page RC-55 (optional)
Configuring Aggregate Addresses, page RC-57 (optional)
Redistributing iBGP Routes into IGP, page RC-58 (optional)
Redistributing Prefixes into Multiprotocol BGP, page RC-60 (optional)
Configuring BGP Route Dampening, page RC-62 (optional)
Applying Policy When Updating the Routing Table, page RC-66 (optional)
Setting BGP Administrative Distance, page RC-69 (optional)
Configuring a BGP Neighbor Group and Neighbors, page RC-70 (required)
Configuring a Route Reflector for BGP, page RC-73 (optional)
Configuring BGP Route Filtering by Route Policy, page RC-75 (optional)
Configuring BGP Next-Hop Trigger Delay, page RC-77 (optional)
Disabling Next-Hop Processing on BGP Updates, page RC-78 (optional)
Configuring BGP Community and Extended-Community Advertisements, page RC-80 (optional)
Configuring the BGP Cost Community, page RC-82 (optional)
Configuring Software to Store Updates from a Neighbor, page RC-87 (optional)
Configuring Distributed BGP, page RC-89 (optional)
Configuring a VPN Routing and Forwarding Instance in BGP, page RC-91 (optional)
Configuring Keychains for BGP, page RC-113 (optional)
Disabling a BGP Neighbor, page RC-114 (optional)
Disabling a BGP Neighbor, page RC-114 (optional)
Resetting Neighbors Using BGP Inbound Soft Reset, page RC-116 (optional)
Resetting Neighbors Using BGP Outbound Soft Reset, page RC-116 (optional)
Resetting Neighbors Using BGP Hard Reset, page RC-117 (optional)
Clearing Caches, Tables, and Databases, page RC-118 (optional)
Displaying System and Network Statistics, page RC-119 (optional)
Displaying BGP Process Information, page RC-121 (optional)
Monitoring BGP Update Groups, page RC-122 (optional)
RC-40
OL-17300-01

Enabling BGP Routing

Perform this task to enable BGP routing and establish a BGP routing process. Configuring BGP
neighbors is included as part of enabling BGP routing.
Note
At least one neighbor and at least one address family must be configured to enable BGP routing. At least
one neighbor with both a remote AS and an address family must be configured globally using the
address family and remote as commands.
Prerequisites
BGP must be able to obtain a router identifier (for example, a configured loopback address). At least,
one address family must be configured in the BGP router configuration and the same address family must
also be configured under the neighbor.
Restrictions
If the neighbor is configured as an external BGP (eBGP) peer, you must configure an inbound and
outbound route policy on the neighbor using the route-policy command.
SUMMARY STEPS
1.
configure
2.
route-policy route-policy-name
3.
end-policy
4.
end
or
commit
5.
configure
6.
router bgp as-number
7.
bgp router-id ip-address
8.
address-family {ipv4 | ipv6} unicast
9.
exit
10. neighbor ip-address

11. remote-as as-number
12. address-family {ipv4 | ipv6} unicast
13. route-policy route-policy-name {in | out}
14. end
or
commit
OL-17300-01
RC-41

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Enters global configuration mode.
Example:
RP/0/RSP0/CPU0:router# configure
Step 2
route-policy route-policy-name
(Optional) Creates a route policy and enters route policy

configuration mode, where you can define the route policy.
Example:
RP/0/RSP0/CPU0:router(config)# route-policy
drop-as-1234
RP/0/RSP0/CPU0:router(config-rpl)# if as-path
passes-through '1234' then
RP/0/RSP0/CPU0:router(config-rpl)# apply
check-communities
RP/0/RSP0/CPU0:router(config-rpl)# else
RP/0/RSP0/CPU0:router(config-rpl)# endif
Step 3
end-policy
(Optional) Ends the definition of a route policy and exits

route policy configuration mode.
Example:
Step 4
Saves configuration changes.
end
or
commit
When you issue the end command, the system prompts

you to commit changes:
Example:
Uncommitted changes found, commit them before

exiting(yes/no/cancel)?
[cancel]:
RP/0/RSP0/CPU0:router(config)# end
or
Entering yes saves configuration changes to the
RP/0/RSP0/CPU0:router(config)# commit
running configuration file, exits the configuration

session, and returns the router to EXEC mode.
Entering no exits the configuration session and
returns the router to EXEC mode without

committing the configuration changes.
Entering cancel leaves the router in the current
configuration session without exiting or

Use the commit command to save the configuration

changes to the running configuration file and remain
within the configuration session.
RC-42
OL-17300-01

Step 5
Command or Action
Purpose
configure
Example:
Step 6
Enters BGP configuration mode, allowing you to configure

the BGP routing process.
Example:
Step 7
Configures the local router with a specified router ID.
Example:
RP/0/RSP0/CPU0:router(config-bgp)# bgp
router-id 192.168.70.24
Step 8
Specifies either the IPv4 or IPv6 address family and enters

address family configuration submode.
Example:
To see a list of all the possible keywords and arguments for

this command, use the CLI help (?).
RP/0/RSP0/CPU0:router(config-vrf)#
Step 9
Exits the current configuration mode.
exit
Example:
RP/0/RSP0/CPU0:router(config-bgp-af)# exit
Step 10
Places the router in neighbor configuration mode for BGP

routing and configures the neighbor IP address as a BGP
peer.
neighbor ip-address
Example:
RP/0/RSP0/CPU0:router(config-bgp)# neighbor
172.168.40.24
Step 11
Creates a neighbor and assigns a remote autonomous

system number to it.
remote-as as-number
Example:
remote-as 2002
Step 12

Example:

OL-17300-01
RC-43

Step 13
Command or Action
Purpose
route-policy route-policy-name {in | out}
(Optional) Applies the specified policy to inbound IPv4

unicast routes.
Example:
route-policy drop-as-1234 in
Step 14
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# end
or
commit




Configuring a Routing Domain Confederation for BGP

Perform this task to configure the routing domain confederation for BGP. This includes specifying a
confederation identifier and autonomous systems that belong to the confederation.
Configuring a routing domain confederation reduces the internal BGP (iBGP) mesh by dividing an
autonomous system into multiple autonomous systems and grouping them into a single confederation.
Each autonomous system is fully meshed within itself and has a few connections to another autonomous
system in the same confederation. The confederation maintains the next hop and local preference
information, and that allows you to retain a single Interior Gateway Protocol (IGP) for all autonomous
systems. To the outside world, the confederation looks like a single autonomous system.
SUMMARY STEPS
1.
configure
2.
3.
bgp confederation identifier as-number
4.
bgp confederation peers as-number
5.
end
or
commit
RC-44
OL-17300-01

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
bgp confederation identifier as-number
Specifies a BGP confederation identifier.
Example:
confederation identifier 5
OL-17300-01
RC-45

Step 4
Command or Action
Purpose
bgp confederation peers as-number
Specifies that the BGP autonomous systems belong to a

specified BGP confederation identifier. You can associate
multiple AS numbers to the same confederation identifier,
as shown in the example.
Example:
confederation peers 1091
Step 5
bgp
bgp
bgp
bgp
bgp
bgp
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp)# end
or
RP/0/RSP0/CPU0:router(config-bgp)# commit




Resetting an eBGP Session Immediately Upon Link Failure

By default, if a link goes down, all BGP sessions of any directly adjacent external peers are immediately
reset. Use the bgp fast-external-fallover disable command to disable automatic resetting. Turn the
automatic reset back on using the no bgp fast-external-fallover disable command.
Logging Neighbor Changes

Logging neighbor changes is enabled by default. Use the log neighbor changes disable command to
turn off logging. The no log neighbor changes disable command can also be used to turn logging back
on if it has been disabled.
RC-46
OL-17300-01

Adjusting BGP Timers

Perform this task to set the timers for BGP neighbors.
BGP uses certain timers to control periodic activities, such as the sending of keepalive messages and the
interval after which a neighbor is assumed to be down if no messages are received from the neighbor
during the interval. The values set using the timers bgp command in router configuration mode can be
overridden on particular neighbors using the timers command in the neighbor configuration mode.
SUMMARY STEPS
1.
configure
2.
3.
timers bgp keepalive hold-time
4.
neighbor ip-address
5.
timers keepalive hold-time
6.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
Sets a default keepalive time and a default hold time for all
neighbors.
timers bgp keepalive hold-time
Example:
RP/0/RSP0/CPU0:router(config-bgp)# timers bgp
30 90
Step 4

peer.
neighbor ip-address
Example:
172.168.40.24
OL-17300-01
RC-47

Step 5
Command or Action
Purpose
(Optional) Sets the keepalive timer and the hold-time timer

for the BGP neighbor.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# timers
60 220
Step 6
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# end
or
RP/0/RSP0/CPU0:router(config-bgp-nbr)# commit




Changing the BGP Default Local Preference Value

Perform this task to set the default local preference value for BGP paths.
SUMMARY STEPS
1.
configure
2.
3.
bgp default local-preference value
4.
end
or
commit
RC-48
OL-17300-01

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
bgp default local-preference value
Example:
Sets the default local preference value from the default of

100, making it either a more preferable path (over 100) or
less preferable path (under 100).
RP/0/RSP0/CPU0:router(config-bgp)# bgp default

local-preference 200
Step 4
end
or
commit

Example:

[cancel]:
or




OL-17300-01
RC-49

Configuring the MED Metric for BGP

Perform this task to set the multi exit discriminator (MED) to advertise to peers for routes that do not
already have a metric set (routes that were received with no MED attribute).
SUMMARY STEPS
1.
configure
2.
3.
default-metric value
4.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
RC-50
OL-17300-01

Step 3
Command or Action
Purpose
default-metric value
Sets the default metric, which is used to set the MED to

advertise to peers for routes that do not already have a
metric set (routes that were received with no MED
attribute).
Example:
RP/0/RSP0/CPU0:router(config-bgp)# default
metric 10
Step 4
end
or
commit

Example:

[cancel]:
or




Configuring BGP Weights

Perform this task to assign a weight to routes received from a neighbor. A weight is a number that you
can assign to a path so that you can control the best-path selection process. If you have particular
neighbors that you want to prefer for most of your traffic, you can use the weight command to assign a
higher weight to all routes learned from that neighbor.
Restrictions
The clear bgp command must be used for the newly configured weight to take effect.
SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
4.
remote-as as-number
5.
6.
weight weight-value
OL-17300-01
RC-51

7.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
neighbor ip-address
Example:

peer.
172.168.40.24
Step 4
remote-as as-number

Example:
remote-as 2002
Step 5

Example:

RC-52
OL-17300-01

Step 6
Command or Action
Purpose
weight weight-value
Assigns a weight to all routes learned through the neighbor.
Example:
weight 41150
Step 7
end
or
commit

Example:

[cancel]:
or
commit




Tuning the BGP Best-Path Calculation

Perform this task to change the default BGP best-path calculation behavior.
SUMMARY STEPS
1.
configure
2.
3.
bgp bestpath med missing-as-worst
4.
bgp bestpath med always
5.
bgp bestpath med confed
6.
bgp bestpath as-path ignore
7.
bgp bestpath compare-routerid
8.
end
or
commit
OL-17300-01
RC-53

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
bgp bestpath med missing-as-worst
Example:
Directs the BGP software to consider a missing MED

attribute in a path as having a value of infinity, making this
path the least desirable path.
RP/0/RSP0/CPU0:router(config-bgp)# bgp bestpath

med missing-as-worst
Step 4
bgp bestpath med always
Example:
med always
Step 5
bgp bestpath med confed
Configures the BGP speaker in the specified autonomous

system to compare MEDs among all the paths for the prefix,
regardless of the autonomous system from which the paths
are received.
Enables BGP software to compare MED values for paths
learned from confederation peers.
Example:
med confed
Step 6
bgp bestpath as-path ignore
Configures the BGP software to ignore the autonomous

system length when performing best-path selection.
Example:
as-path ignore
RC-54
OL-17300-01

Step 7
Command or Action
Purpose
bgp bestpath compare-routerid
Configure the BGP speaker in the autonomous system to

compare the router IDs of similar paths.
Example:
compare-routerid
Step 8
end
or
commit

Example:

[cancel]:
or




Indicating BGP Back-door Routes

Perform this task to set the administrative distance on an external Border Gateway Protocol (eBGP) route
to that of a locally sourced BGP route, causing it to be less preferred than an Interior Gateway Protocol
(IGP) route.
SUMMARY STEPS
1.
configure
2.
3.
4.
network {ip-address /prefix-length | ip-address mask} backdoor
5.
end
or
commit
OL-17300-01
RC-55

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

Example:

Step 4
network {ip-address /prefix-length | ip-address

mask} backdoor
Configures the local router to originate and advertise the

specified network.
Example:
RP/0/RSP0/CPU0:router(config-bgp-af)# network
172.20.0.0/16
Step 5
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-af)# end
or
RP/0/RSP0/CPU0:router(config-bgp-af)# commit




RC-56
OL-17300-01

Configuring Aggregate Addresses

Perform this task to create aggregate entries in a BGP routing table.
SUMMARY STEPS
1.
configure
2.
3.
4.
aggregate-address address/mask-length [as-set] [as-confed-set] [summary-only] [route-policy

route-policy-name]
5.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

Example:

OL-17300-01
RC-57

Step 4
Command or Action
Purpose
aggregate-address address/mask-length [as-set]

[as-confed-set] [summary-only] [route-policy
route-policy-name]
Creates an aggregate address. The path advertised for this

route is an autonomous system set consisting of all elements
contained in all paths that are being summarized.
Example:
The as-set keyword generates autonomous system set

path information and community information from
contributing paths.
The as-confed-set keyword generates autonomous

system confederation set path information from
contributing paths.
The summary-only keyword filters all more specific

routes from updates.
The route-policy route-policy-name keyword and

argument specify the route policy used to set the
attributes of the aggregate route.
aggregate-address 10.0.0.0/8 as-set
Step 5
end
or
commit

Example:

[cancel]:
or




Redistributing iBGP Routes into IGP

Perform this task to redistribute iBGP routes into an Interior Gateway Protocol (IGP), such as
Intermediate System-to-Intermediate System (IS-IS) or Open Shortest Path First (OSPF).
Note
Caution
Use of the bgp redistribute-internal command requires the clear route * command to be issued to
reinstall all BGP routes into the IP routing table.
Redistributing iBGP routes into IGPs may cause routing loops to form within an autonomous system.
Use this command with caution.
RC-58
OL-17300-01

SUMMARY STEPS
1.
configure
2.
3.
bgp redistribute-internal
4.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
Allows the redistribution of iBGP routes into an IGP, such

as IS-IS or OSPF.
bgp redistribute-internal
Example:
redistribute-internal
Step 4
end
or
commit

Example:

[cancel]:
or




OL-17300-01
RC-59

Redistributing Prefixes into Multiprotocol BGP

Perform this task to redistribute prefixes from another protocol into multiprotocol BGP.
Redistribution is the process of injecting prefixes from one routing protocol into another routing
protocol. This task shows how to inject prefixes from another routing protocol into multiprotocol BGP.
Specifically, prefixes that are redistributed into multiprotocol BGP using the redistribute command are
injected into the unicast database, the multicast database, or both.
SUMMARY STEPS
1.
configure
2.
3.
4.
redistribute connected [metric metric-value] [route-policy route-policy-name]

or
redistribute eigrp process-id [match {external | internal}] [metric metric-value] [route-policy
route-policy-name]
or
redistribute isis process-id [level {1 | 1-inter-area | 2}] [metric metric-value] [route-policy
route-policy-name]
or
redistribute ospf process-id [match {external [1 | 2] | internal | nssa-external [1 | 2]]} [metric
metric-value] [route-policy route-policy-name]
or
redistribute ospfv3 process-id [match {external [1 | 2] | internal | nssa-external [1 | 2]]} [metric
or
redistribute rip [metric metric-value] [route-policy route-policy-name]
or
redistribute static [metric metric-value] [route-policy route-policy-name]
5.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
RC-60
OL-17300-01

Step 3
Command or Action
Purpose

Example:

Step 4
redistribute connected [metric metric-value]

[route-policy route-policy-name]
or
Causes routes from the specified instance to be redistributed

into BGP.
redistribute eigrp process-id [match {external

| internal}] [metric metric-value]
or
redistribute isis process-id [level {1 |
1-inter-area | 2}] [metric metric-value]
or
redistribute ospf process-id [match {external
[1 | 2] | internal | nssa-external [1 | 2]]}
[metric metric-value] [route-policy
route-policy-name]
or
redistribute ospfv3 process-id [match {external
[1 | 2] | internal | nssa-external [1 | 2]]}
route-policy-name]
or
redistribute rip [metric metric-value]
or
redistribute static [metric metric-value]
Example:
redistribute ospf 110
OL-17300-01
RC-61

Step 5
Command or Action
Purpose
end
or
commit

Example:

[cancel]:
or




Configuring BGP Route Dampening

Perform this task to configure and monitor BGP route dampening.
SUMMARY STEPS
1.
configure
2.
3.
4.
bgp dampening [half-life [reuse suppress max-suppress-time] | route-policy route-policy-name]
5.
end
or
commit
6.
show bgp [ipv4 {unicast | multicast | labeled-unicast | all} | ipv6 unicast | all {unicast | multicast
| all | labeled-unicast} | vpnv4 unicast [rd rd-address] | vrf {vrf-name | all} [ipv4 {unicast |
labeled-unicast} | ipv6 unicast]] flap-statistics
7.
labeled-unicast} | ipv6 unicast]] flap-statistics regexp regular-expression
8.
labeled-unicast} | ipv6 unicast]] flap-statistics route-policy route-policy-name
9.
labeled-unicast} | ipv6 unicast]] flap-statistics {ip-address {mask | /prefix-length}}
RC-62
OL-17300-01

10. show bgp [ipv4 {unicast | multicast | labeled-unicast | all} | ipv6 unicast | all {unicast | multicast
labeled-unicast} | ipv6 unicast]] flap-statistics {ip-address [{mask | /prefix-length}
[longer-prefixes]]}
11. clear bgp {ipv4 {unicast | multicast | labeled-unicast | all} | ipv6 unicast | all {unicast |
multicast | all | labeled-unicast} | vpnv4 unicast | vrf {vrf-name | all} {ipv4 {unicast |
labeled-unicast} | ipv6 unicast}} flap-statistics
labeled-unicast} | ipv6 unicast}} flap-statistics flap-statistics regexp regular-expression
labeled-unicast} | ipv6 unicast}} flap-statistics flap-statistics route-policy route-policy-name
labeled-unicast} | ipv6 unicast}} flap-statistics network/mask-length
labeled-unicast} | ipv6 unicast}} flap-statistics ip-address/mask-length
16. show bgp [ipv4 {unicast | multicast | labeled-unicast | all} | ipv6 unicast | all {unicast | multicast
labeled-unicast} | ipv6 unicast]] dampened-paths
labeled-unicast} | ipv6 unicast}} flap-statistics dampening [ip-address/mask-length]
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

Example:

OL-17300-01
RC-63

Step 4
Command or Action
Purpose
bgp dampening [half-life [reuse suppress

max-suppress-time] | route-policy
route-policy-name]
Configures BGP dampening for the specified address

family.
Example:
RP/0/RSP0/CPU0:router(config-bgp-af)# bgp
dampening 30 1500 10000 120
Step 5
end
or
commit

Example:

[cancel]:
or



Step 6
show bgp [ipv4 {unicast | multicast |

labeled-unicast | all} | ipv6 unicast | all
{unicast | multicast | all | labeled-unicast} |
vpnv4 unicast [rd rd-address] | vrf {vrf-name |
all} [ipv4 {unicast | labeled-unicast} | ipv6
unicast]] flap-statistics

Displays BGP flap statistics.
Example:
RP/0/RSP0/CPU0:router# show bgp flap statistics
Step 7

unicast]] flap-statistics regexp
regular-expression
Displays BGP flap statistics for all paths that match the
regular expression.
Example:
RP/0/RSP0/CPU0:router# show bgp flap-statistics
regexp _1$
RC-64
OL-17300-01

Step 8
Command or Action
Purpose

unicast]] flap-statistics route-policy
route-policy-name
Displays BGP flap statistics for the specified route policy.
Example:
RP/0/RSP0/CPU0:router(config)# show bgp
flap-statistics route-policy policy_A
Step 9

unicast]] flap-statistics {ip-address {mask |
/prefix-length}}
Displays BGP flap for the specified prefix.
Example:
172.20.1.1
Step 10

unicast]] flap-statistics {ip-address [{mask |
/prefix-length} [longer-prefixes]]}
Displays BGP flap statistics for more specific entries for the
specified IP address.
Example:
172.20.1.1 longer-prefixes
Step 11
clear bgp {ipv4 {unicast | multicast |

vpnv4 unicast | vrf {vrf-name | all} {ipv4
{unicast | labeled-unicast} | ipv6 unicast}}
flap-statistics
Clears BGP flap statistics for all routes.
Example:
RP/0/RSP0/CPU0:router# clear bgp all all
flap-statistics
Step 12

flap-statistics regexp regular-expression
Clears BGP flap statistics for all paths that match the
specified regular expression.
Example:
RP/0/RSP0/CPU0:router# clear bgp ipv4 unicast
flap-statistics regexp _1$
OL-17300-01
RC-65

Step 13
Command or Action
Purpose

flap-statistics route-policy route-policy-name
Clears BGP flap statistics for the specified route policy.
Example:
flap-statistics route-policy policy_A
Step 14

flap-statistics network/mask-length
Clears BGP flap statistics for the specified network.
Example:
flap-statistics 192.168.40.0/24
Step 15

flap-statistics ip-address/mask-length
Clears BGP flap statistics for routes received from the

specified neighbor.
Example:
flap-statistics 172.20.1.1
Step 16

unicast]] dampened-paths
Displays the dampened routes, including the time

remaining before they are unsuppressed.
Example:
RP/0/RSP0/CPU0:router# show bgp dampened paths
Step 17

dampening [ip-address/mask-length]
Clears route dampening information and unsuppresses the

suppressed routes.
Example:
RP/0/RSP0/CPU0:router# clear bgp dampening
Applying Policy When Updating the Routing Table

Perform this task to apply a routing policy to routes being installed into the routing table.
RC-66
OL-17300-01

Prerequisites
See the Implementing Routing Policy on Cisco ASR 9000 Series Routers module of Cisco ASR 9000
Series Aggregation Services Router Routing Configuration Guide (this publication) for a list of the
supported attributes and operations that are valid for table policy filtering.
SUMMARY STEPS
1.
configure
2.
3.
4.
table-policy policy-name
5.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
RP/0/RSP0/CPU0:router(config)# router bgp 120.6
Step 3

Example:

OL-17300-01
RC-67

Step 4
Command or Action
Purpose
table-policy policy-name
Applies the specified policy to routes being installed into

the routing table.
Example:
table-policy tbl-plcy-A
Step 5
end
or
commit

Example:

[cancel]:
or




RC-68
OL-17300-01

Setting BGP Administrative Distance

Perform this task to specify the use of administrative distances that can be used to prefer one class of
route over another.
SUMMARY STEPS
1.
configure
2.
3.
4.
distance bgp external-distance internal-distance local-distance
5.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
Specifies either an IPv4 or IPv6 address family unicast and

enters address family configuration submode.
Example:

OL-17300-01
RC-69

Step 4
Command or Action
Purpose
distance bgp external-distance

internal-distance local-distance
Sets the external, internal, and local administrative

distances to prefer one class of routes over another. The
higher the value, the lower the trust rating.
Example:
RP/0/RSP0/CPU0:router(config-bgp-af)# distance
bgp 20 20 200
Step 5
end
or
commit

Example:

[cancel]:
or




Configuring a BGP Neighbor Group and Neighbors

Perform this task to configure BGP neighbor groups and apply the neighbor group configuration to a
neighbor. A neighbor group is a template that holds address family-independent and address
family-dependent configurations associated with the neighbor.
After a neighbor group is configured, each neighbor can inherit the configuration through the use
command. If a neighbor is configured to use a neighbor group, the neighbor (by default) inherits the
entire configuration of the neighbor group, which includes the address family-independent and address
family-dependent configurations. The inherited configuration can be overridden if you directly
configure commands for the neighbor or configure session groups or address family groups through the
use command.
You can configure an address family-independent configuration under the neighbor group. An address
family-dependent configuration requires you to configure the address family under the neighbor group
to enter address family submode.
From neighbor group configuration mode, you can configure address family-independent parameters for
the neighbor group. Use the address-family command when in the neighbor group configuration mode.
After specifying the neighbor group name using the neighbor group command, you can assign options
to the neighbor group.
RC-70
OL-17300-01

Note
All commands that can be configured under a specified neighbor group can be configured under a
neighbor.
SUMMARY STEPS
1.
configure
2.
3.
4.
exit
5.
neighbor-group name
6.
remote-as as-number
7.
8.
9.
exit
10. exit
12. use neighbor-group group-name
14. end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

Example:

Step 4
exit
Example:
OL-17300-01
RC-71

Step 5
Command or Action
Purpose
neighbor-group name
Places the router in neighbor group configuration mode.
Example:
neighbor-group nbr-grp-A
Step 6
remote-as as-number

Example:
RP/0/RSP0/CPU0:router(config-bgp-nbrgrp)#
remote-as 2002
Step 7

Example:

Step 8
(Optional) Applies the specified policy to inbound IPv4

unicast routes.
Example:
Step 9
exit
Example:
exit
Step 10
exit
Example:
Step 11
neighbor ip-address
Example:

peer.
172.168.40.24
Step 12
use neighbor-group group-name
(Optional) Specifies that the BGP neighbor inherit

configuration from the specified neighbor group.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# use
neighbor-group nbr-grp-A
RC-72
OL-17300-01

Step 13
Command or Action
Purpose
remote-as as-number

Example:
remote-as 2002
Step 14
end
or
commit

Example:

[cancel]:
or




Configuring a Route Reflector for BGP

Perform this task to configure a route reflector for BGP.
All the neighbors configured with the route-reflector-client command are members of the client group,
and the remaining iBGP peers are members of the nonclient group for the local route reflector.
Together, a route reflector and its clients form a cluster. A cluster of clients usually has a single route
reflector. In such instances, the cluster is identified by the software as the router ID of the route reflector.
To increase redundancy and avoid a single point of failure in the network, a cluster can have more than
one route reflector. If it does, all route reflectors in the cluster must be configured with the same 4-byte
cluster ID so that a route reflector can recognize updates from route reflectors in the same cluster. The
bgp cluster-id command is used to configure the cluster ID when the cluster has more than one route
reflector.
SUMMARY STEPS
1.
configure
2.
3.
bgp cluster-id cluster-id
4.
neighbor ip-address
5.
remote-as as-number
OL-17300-01
RC-73

6.
7.
route-reflector-client
8.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
bgp cluster-id cluster-id
Example:
Configures the local router as one of the route reflectors

serving the cluster. It is configured with a specified cluster
ID to identify the cluster.
cluster-id 192.168.70.1
Step 4
neighbor ip-address
Example:

peer.
172.168.40.24
Step 5
remote-as as-number

Example:
remote-as 2003
Step 6

Example:

RC-74
OL-17300-01

Step 7
Command or Action
Purpose
Configures the router as a BGP route reflector and

configures the neighbor as its client.
Example:
Step 8
end
or
commit

Example:

[cancel]:
or
commit




Configuring BGP Route Filtering by Route Policy

Perform this task to configure BGP routing filtering by route policy.
Prerequisites
See the Implementing Routing Policy on Cisco ASR 9000 Series Routers module of Cisco ASR 9000
Series Aggregation Services Router Routing Configuration Guide (this publication) for a list of the
supported attributes and operations that are valid for inbound and outbound neighbor policy filtering.
SUMMARY STEPS
1.
configure
2.
route-policy name
3.
end-policy
4.
5.
neighbor ip-address
6.
7.
OL-17300-01
RC-75

8.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2
route-policy name
(Optional) Creates a route policy and enters route policy

configuration mode, where you can define the route policy.
Example:
drop-as-1234
RP/0/RSP0/CPU0:router(config-rpl)# if as-path
passes-through '1234' then
RP/0/RSP0/CPU0:router(config-rpl)# apply
check-communities
RP/0/RSP0/CPU0:router(config-rpl)# else
RP/0/RSP0/CPU0:router(config-rpl)# endif
Step 3
end-policy
(Optional) Ends the definition of a route policy and exits

route policy configuration mode.
Example:
Step 4

Example:
Step 5
neighbor ip-address
Example:

peer.
172.168.40.24
Step 6

Example:

RC-76
OL-17300-01

Step 7
Command or Action
Purpose
Applies the specified policy to inbound routes.
Example:
Step 8
end
or
commit

Example:

[cancel]:
or
commit




Configuring BGP Next-Hop Trigger Delay

Perform this task to configure BGP next-hop trigger delay. The Routing Information Base (RIB)
classifies the dampening notifications based on the severity of the changes. Event notifications are
classified as critical and noncritical. This task allows you to specify the minimum batching interval for
the critical and noncritical events.
SUMMARY STEPS
1.
configure
2.
3.
4.
nexthop trigger-delay {critical delay | non-critical delay}
5.
end
or
commit
OL-17300-01
RC-77

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

Example:

Step 4
nexthop trigger-delay {critical delay |

non-critical delay}
Sets the critical next-hop trigger delay.
Example:
RP/0/RSP0/CPU0:router(config-bgp-af)# nexthop
trigger-delay critical 15000
Step 5
end
or
commit

Example:

[cancel]:
or




Disabling Next-Hop Processing on BGP Updates

Perform this task to disable next-hop calculation for a neighbor and insert your own address in the
next-hop field of BGP updates. Disabling the calculation of the best next hop to use when advertising a
route causes all routes to be advertised with the network device as the next hop.
RC-78
OL-17300-01

Note
Next-hop processing can be disabled for address family group, neighbor group, or neighbor address
family.
SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
4.
remote-as as-number
5.
6.
next-hop-self
7.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

peer.
neighbor ip-address
Example:
172.168.40.24
Step 4

remote-as as-number
Example:
remote-as 206
Step 5

Example:

OL-17300-01
RC-79

Step 6
Command or Action
Purpose
next-hop-self
next-hop-self
Sets the next-hop attribute for all routes advertised to the

specified neighbor to the address of the local router.
Disabling the calculation of the best next hop to use when
advertising a route causes all routes to be advertised with
the local network device as the next hop.
end
Example:
Step 7
or
commit

Example:

[cancel]:
or
commit




Configuring BGP Community and Extended-Community Advertisements

Perform this task to specify that community attributes should be sent to an eBGP neighbor.
Perform this task to specify that community/extended-community attributes should be sent to an eBGP
neighbor. These attributes are not sent to an eBGP neighbor by default. By contrast, they are always sent
to iBGP neighbors. This section provides examples on how to enable sending community attributes. The
send-community-ebgp keyword can be replaced by the send-extended-community-ebgp keyword to
enable sending extended-communities.
Note
If the send-community-ebgp command is configured for a neighbor group or address family group, all
neighbors using the group inherit the configuration. Configuring the command specifically for a
neighbor overrides inherited values.
Note
BGP community and extended-community filtering cannot be configured for iBGP neighbors.
Communities and extended-communities are always sent to iBGP neighbors
RC-80
OL-17300-01

SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
4.
remote-as as-number
5.
6.
send-community-ebgp
7.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

peer.
neighbor ip-address
Example:
172.168.40.24
Step 4

remote-as as-number
Example:
remote-as 2002
Step 5
address-family {ipv4|ipv6} unicast
Enters neighbor address family configuration mode for the

specified address family.
Example:
OL-17300-01
RC-81

Step 6
Command or Action
Purpose
send-community-ebgp
Specifies that the router send community attributes (which

are disabled by default for eBGP neighbors) to a specified
eBGP neighbor.
Example:
send-community-ebgp
Step 7
end
or
commit

Example:

[cancel]:
or
commit




Configuring the BGP Cost Community

Perform this task to configure the BGP cost community.
BGP receives multiple paths to the same destination and it uses the best-path algorithm to decide which
is the best path to install in RIB. To enable users to determine an exit point after partial comparison, the
cost community is defined to tie-break equal paths during the best-path selection process.
SUMMARY STEPS
1.
configure
2.
route-policy name
3.
set extcommunity cost {cost-extcommunity-set-name | cost-inline-extcommunity-set} [additive]
4.
end-policy
5.
6.
default-information originate
or
address-family {ipv4 unicast | ipv4 multicast | ipv4 tunnel | ipv6 unicast | vpnv4 unicast}
aggregate-address address/mask-length [as-set] [as-confed-set] [summary-only] [route-policy
route-policy-name]
RC-82
OL-17300-01

or
or
route-policy-name]
or
route-policy-name]
or
redistribute ospf process-id [match {external [1 | 2] | internal | nssa-external [1 | 2]}] [metric
or
or
or
network {ip-address/prefix-length | ip-address mask} [route-policy route-policy-name]
or
neighbor ip-address
remote-as as-number
7.
end
or
commit
8.
show bgp [vrf vrf-name] ip-address
OL-17300-01
RC-83

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2
route-policy name
Enters route policy configuration mode and specifies the

name of the route policy to be configured.
Example:
costA
Step 3
set extcommunity cost

{cost-extcommunity-set-name |
cost-inline-extcommunity-set} [additive]
Specifies the BGP extended community attribute for cost.
Example:
RP/0/RSP0/CPU0:router(config)# set extcommunity
cost cost_A
Step 4
end-policy
Ends the definition of a route policy and exits route policy

configuration mode.
Example:
RP/0/RSP0/CPU0:router(config)# end-policy
Step 5
Enters BGP configuration mode allowing you to configure

Example:
RC-84
OL-17300-01

Step 6
Command or Action
Purpose
Applies the cost community to the attach point (route

policy).
or
aggregate-address address/mask-length [as-set]
[as-confed-set] [summary-only] [route-policy
route-policy-name]
or
address-family {ipv4 unicast | ipv4 multicast |
ipv4 tunnel | ipv6 unicast | vpnv4 unicast}
or

or
or
[1 | 2] | internal | nssa-external [1 | 2]}]
route-policy-name]
or
OL-17300-01
RC-85

Command or Action
Purpose

or
or
network {ip-address/prefix-length | ip-address
mask} [route-policy route-policy-name]
or
neighbor ip-address
remote-as as-number
or
Example:
RC-86
OL-17300-01

Step 7
Command or Action
Purpose
end
or
commit

Example:

[cancel]:
or



Step 8
show bgp [vrf vrf-name] ip-address

Displays the cost community in the following format:

Cost:POI:cost-community-ID:cost-number
Example:
RP/0/RSP0/CPU0:router# show bgp 172.168.40.24
Configuring Software to Store Updates from a Neighbor

Perform this task to configure the software to store updates received from a neighbor.
The soft-reconfiguration inbound command causes a route refresh request to be sent to the neighbor if
the neighbor is route refresh capable. If the neighbor is not route refresh capable, the neighbor must be
reset to relearn received routes using the clear bgp soft command. See the Resetting Neighbors Using
BGP Inbound Soft Reset section on page RC-116.
Note
Storing updates from a neighbor works only if either the neighbor is route refresh capable or the
soft-reconfiguration inbound command is configured. Even if the neighbor is route refresh capable and
the soft-reconfiguration inbound command is configured, the original routes are not stored unless the
always option is used with the command. The original routes can be easily retrieved with a route refresh
request. Route refresh sends a request to the peer to resend its routing information. The
soft-reconfiguration inbound command stores all paths received from the peer in an unmodified form
and refers to these stored paths during the clear. Soft reconfiguration is memory intensive.
SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
OL-17300-01
RC-87

4.
5.
soft-reconfiguration inbound [always]
6.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
neighbor ip-address
Example:

peer.
172.168.40.24
Step 4

Example:

RC-88
OL-17300-01

Step 5
Command or Action
Purpose
soft-reconfiguration inbound [always]
Configures the software to store updates received from a

specified neighbor. Soft reconfiguration inbound causes the
software to store the original unmodified route in addition
to a route that is modified or filtered. This allows a soft
clear to be performed after the inbound policy is changed.
Example:
soft-reconfiguration inbound always
Soft reconfiguration enables the software to store the

incoming updates before apply policy if route refresh is not
supported by the peer (otherwise a copy of the update is not
stored). The always keyword forces the software to store a
copy even when route refresh is supported by the peer.
Step 6
end
or
commit

Example:

[cancel]:
or
commit




Configuring Distributed BGP

Perform this task to configure distributed BGP. Configuring distributed BGP includes starting the speaker
process and allocating the speaker process to a neighbor.
Restrictions
If BGP is running in standalone mode, the clear bgp current-mode or clear bgp vrf all * command
must be used to switch from standalone mode to distributed mode.
SUMMARY STEPS
1.
configure
2.
3.
distributed speaker id
4.
commit
OL-17300-01
RC-89

5.
6.
exit
7.
neighbor ip-address
8.
remote-as as-number
9.
speaker-id id

11. end
12. clear bgp current-mode
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
distributed speaker id
Specifies the speaker process to start.
Example:
RP/0/RSP0/CPU0:router(config-bgp)# distributed
speaker 2
Step 4
commit
Example:
Saves the configuration changes to the running

configuration file and remains within the configuration
session.
Step 5

Example:

Step 6
Exits address family mode.
exit
Example:
Step 7
neighbor ip-address
Example:

peer.
172.168.40.24
RC-90
OL-17300-01

Step 8
Command or Action
Purpose
remote-as as-number

Example:
remote-as 2002
Step 9
Allocates a neighbor to a specified speaker process.
speaker-id id
Example:
speaker-id 2
Step 10

Example:

Step 11
end
Example:

[cancel]:



Step 12
Switches from standalone mode to distributed mode.
clear bgp current-mode
Example:
RP/0/RSP0/CPU0:router# clear bgp current-mode
Configuring a VPN Routing and Forwarding Instance in BGP

The following tasks are used to configure a VPN routing and forwarding (VRF) instance in BGP:
Defining the Virtual Routing and Forwarding Tables in Provider Edge Routers, page RC-92
(required)
Configuring the Route Distinguisher, page RC-94 (required)
Configuring BGP to Advertise VRF Routes for Multicast VPN from PE to PE, page RC-95
(required)
Configuring PE-PE or PE-RR Interior BGP Sessions, page RC-100 (required)
OL-17300-01
RC-91

Configuring Route Reflector to Hold Routes That Have a Defined Set of RT Communities,
page RC-102 (optional)
Configuring BGP as a PE-CE Protocol, page RC-104 (optional)
BGP Load Balancing, page RC-108 (optional)
Redistribution of IGPs to BGP, page RC-110 (optional)
Defining the Virtual Routing and Forwarding Tables in Provider Edge Routers
Perform this task to define the VPN routing and forwarding (VRF) tables in the provider edge (PE)
routers.
SUMMARY STEPS
1.
configure
2.
vrf vrf-name
3.
4.
maximum prefix maximum [threshold]
5.
import route-policy policy-name
6.
import route-target [as-number:nn | ip-address:nn]
7.
export route-policy policy-name
8.
export route-target [as-number:nn | ip-address:nn]
9.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2
vrf vrf-name
Configures a VRF instance.
Example:
RP/0/RSP0/CPU0:router(config)# vrf vrf_pe
Step 3

Example:

RC-92
OL-17300-01

Step 4
Command or Action
Purpose
maximum prefix maximum [threshold]
Configures a limit to the number of prefixes allowed in a

VRF table.
Example:
A maximum number of routes is applicable only to dynamic

routing protocols and not to static or connected routes.
RP/0/RSP0/CPU0:router(config-vrf-af)# maximum
prefix 2300
Step 5
You can specify a threshold percentage of the prefix limit

using the mid-threshold argument.
(Optional) Provides finer control over what gets imported
into a VRF. This import filter discards prefixes that do not
match the specified policy-name argument.
import route-policy policy-name
Example:
RP/0/RSP0/CPU0:router(config-vrf-af)# import
route-policy policy_a
Step 6
import route-target [as-number:nn |

ip-address:nn]
Example:
Specifies a list of route target (RT) extended communities.

Only prefixes that are associated with the specified import
route target extended communities are imported into the
VRF.
RP/0/RSP0/CPU0:router(config-vrf-af)# import
route-target 234:222
Step 7
(Optional) Provides finer control over what gets exported

into a VRF. This export filter discards prefixes that do not
match the specified policy-name argument.
export route-policy policy-name
Example:
RP/0/RSP0/CPU0:router(config-vrf-af)# export
route-policy policy_b
Step 8
export route-target [as-number:nn |

ip-address:nn]
Example:
RP/0/RSP0/CPU0:router(config-vrf-af)# export
route-target 123;234
Step 9
Specifies a list of route target extended communities.

Export route target communities are associated with
prefixes when they are advertised to remote PEs. The
remote PEs import them into VRFs which have import RTs
that match these exported route target communities.
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-vrf-af)# end
or
RP/0/RSP0/CPU0:router(config-vrf-af)# commit




OL-17300-01
RC-93

Configuring the Route Distinguisher

The route distinguisher (RD) makes prefixes unique across multiple VPN routing and forwarding (VRF)
instances.
Perform this task to configure the RD.
SUMMARY STEPS
1.
configure
2.
3.
4.
vrf vrf-name
5.
rd {as-number:nn | ip-address:nn | auto}
6.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2
Enters BGP configuration mode allowing you to configure

Example:
Step 3
Configures a fixed router ID for the BGP-speaking router.
Example:
router-id 10.0.0.0
Step 4
vrf vrf-name
Configures a VRF instance.
Example:
RP/0/RSP0/CPU0:router(config-bgp)# vrf vrf_pe
RC-94
OL-17300-01

Step 5
Step 6
Command or Action
Purpose
Configures the route distinguisher.
Example:
Use the auto keyword if you want the router to

automatically assign a unique RD to the VRF.
RP/0/RSP0/CPU0:router(config-bgp-vrf)# rd
345:567
Automatic assignment of RDs is possible only if a router ID

is configured using the bgp router-id command in router
configuration mode. This allows you to configure a globally
unique router ID that can be used for automatic RD
generation. The router ID for the VRF does not need to be
globally unique, and using the VRF router ID would be
incorrect for automatic RD generation. Having a single
router ID also helps in checkpointing RD information for
BGP graceful restart, because it is expected to be stable
across reboots.
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# end
or
RP/0/RSP0/CPU0:router(config-bgp-vrf)# commit




Configuring BGP to Advertise VRF Routes for Multicast VPN from PE to PE

Perform this task to enable multicast VPN routing for IPv4 address families and advertise VRF routes
from one provider edge (PE) router to another.
SUMMARY
1.
configure
2.
3.
4.
5.
exit
6.
address-family vpnv4 unicast
OL-17300-01
RC-95

7.
exit
8.
neighbor ip-address
9.
remote-as as-number
10. update-source interface-type interface-id

12. exit
13. address-family vpnv4 unicast
14. exit
15. vrf vrf-name
16. rd {as-number:nn | ip-address:nn | auto}
18. redistribute connected [metric metric-value] [route-policy route-policy-name]
or
route-policy-name]
or
route-policy-name]
or
or
or
19. end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
RC-96
OL-17300-01

Step 3
Command or Action
Purpose
Configures a fixed router ID for a BGP-speaking router.
Example:
router-id 1.1.1.1
Step 4

Example:

Step 5
Exits IPv4 address family configuration submode and

reenters BGP configuration submode.
exit
Example:
Step 6
Enters VPNv4 address family configuration submode.
Example:
address-family vpvnv4 unicast
Step 7
Exits IPv4 address-family configuration submode and

reenters BGP configuration submode.
exit
Example:
Step 8
Places the PE router in neighbor configuration submode.
neighbor ip-address
Example:
172.16.1.1
Step 9
Creates a neighbor and assigns the neighbor a remote

autonomous system number, which can be from 1 to 65535.
remote-as as-number
Example:
remote-as 100
Step 10
update-source interface-type interface-id
Example:
update-source loopback 0
Allows sessions to use the primary IP address from a

specific interface as the local address when forming a
session with a neighbor.
The interface-type interface-id arguments specify the type
and ID number of the interface, such as GigabitEthernet or
Loopback. Use the CLI help (?) to see a list of all the
possible interface types and their ID numbers.
OL-17300-01
RC-97

Step 11
Command or Action
Purpose

Example:

Step 12
Exits the neighbor address family configuration submode.
exit
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# exit
Step 13
Specifies the address family as VPNv4 and enters address

family configuration submode.
Example:

Step 14
Exits BGP neighbor address family configuration submode.
exit
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr-af)# exit
Step 15
vrf vrf-name
Enables BGP routing for a particular VRF on the PE router.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# vrf vpn1
Step 16
Configures the route distinguisher.
Use the auto keyword if you want the router to

automatically assign a unique RD to the VRF.
Automatic assignment of RDs is possible only if a

router ID is configured using the bgp router-id
command in router configuration mode. This allows
you to configure a globally unique router ID that can be
used for automatic RD generation.
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# rd 1:1
The router ID for the VRF does not need to be globally

unique, and using the VRF router ID would be incorrect
for automatic RD generation. Having a single router ID
also helps in checkpointing RD information for BGP
graceful restart, because it is expected to be stable
across reboots.
Step 17

Example:

RC-98
OL-17300-01

Step 18
Command or Action
Purpose

Configures redistribution of a protocol into the VRF address

family context.
or
or
or
route-policy-name]
or
or
Example:
redistribute ospf 1
Step 19
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-vrf-af)# end
or
commit




OL-17300-01
RC-99

Configuring PE-PE or PE-RR Interior BGP Sessions

To enable BGP to carry VPN reachability information between provider edge (PE) routers you must
configure the PE-PE interior BGP (iBGP) sessions. A PE uses VPN information carried from the remote
PE router to determine VPN connectivity and the label value to be used so the remote (egress) router can
demultiplex the packet to the correct VPN during packet forwarding.
The PE-PE, PE-route reflector (RR) iBGP sessions are defined to all PE and RR routers that participate
in the VPNs configured in the PE router.
Perform this task to configure PE-PE iBGP sessions and to configure global VPN options on a PE.
SUMMARY STEPS
1.
configure
2.
3.
4.
exit
5.
neighbor ip-address
6.
remote-as as-number
7.
description text
8.
password {clear | encrypted} password
9.
shutdown
10. timers keepalive hold-time

11. update-source type interface-id
12. address-family vpnv4 unicast
13. route-policy route-policy-name in
14. route-policy route-policy-name out
15. end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
RC-100
OL-17300-01

Step 3
Command or Action
Purpose
Enters VPN address family configuration mode.
Example:
address-family vpvn4 unicast
Step 4
exit
Example:
Step 5
Configures a PE iBGP neighbor.
neighbor ip-address
Example:
172.16.1.1
Step 6
Assigns the neighbor a remote autonomous system number.
remote-as as-number
Example:
remote-as 1
Step 7
(Optional) Provides a description of the neighbor. The

description is used to save comments and does not affect
software function.
description text
Example:
description neighbor 172.16.1.1
Step 8
Enables Message Digest 5 (MD5) authentication on the

TCP connection between the two BGP neighbors.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# password
encrypted 123abc
Step 9
Terminates any active sessions for the specified neighbor

and removes all associated routing information.
shutdown
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# shutdown
Step 10
Set the timers for the BGP neighbor.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# timers
12000 200
Step 11
Allows iBGP sessions to use the primary IP address from a

specific interface as the local address when forming an
iBGP session with a neighbor.
update-source type interface-id
Example:
update-source gigabitEthernet 0/1/5/0
OL-17300-01
RC-101

Step 12
Command or Action
Purpose
Enters VPN neighbor address family configuration mode.
Example:
Step 13
route-policy route-policy-name in
Specifies a routing policy for an inbound route. The policy

can be used to filter routes or modify route attributes.
Example:
route-policy pe-pe-vpn-in in
Step 14
route-policy route-policy-name out
Specifies a routing policy for an outbound route. The policy

Example:
route-policy pe-pe-vpn-out out
Step 15
end
or
commit

Example:

[cancel]:
or
commit




Configuring Route Reflector to Hold Routes That Have a Defined Set of RT Communities
A provider edge (PE) needs to hold the routes that match the import route targets (RTs) of the VPNs
configured on it. The PE router can discard all other VPNv4 routes. But, a route reflector (RR) must
retain all VPNv4 routes, because it might peer with PE routers and different PEs might require different
RT-tagged VPNv4 (making RRs nonscalable). You can configure an RR to only hold routes that have a
defined set of RT communities. Also, a number of the RRs can be configured to service a different set
of VPNs (thereby achieving some scalability). A PE is then made to peer with all RRs that service the
VRFs configured on the PE. When a new VRF is configured with an RT for which the PE does not
already hold routes, the PE issues route refreshes to the RRs and retrieves the relevant VPN routes.
RC-102
OL-17300-01

Note
Note that this process can be more efficient if the PE-RR session supports extended community outbound
route filter (ORF).
Perform this task to configure a reflector to retain routes tagged with specific RTs.
SUMMARY STEPS
1.
configure
2.
3.
4.
retain route-target {all | route-policy route-policy-name}
5.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
Enters VPN address family configuration mode.
Example:
OL-17300-01
RC-103

Step 4
Command or Action
Purpose
retain route-target {all | route-policy

route-policy-name}
Configures a reflector to retain routes tagged with particular

RTs. Use the route-policy-name argument for the policy
name that lists the extended communities that a path should
have in order for the RR to retain that path.
Example:
Step 5
RP/0/RSP0/CPU0:router(config-bgp-af)# retain
route-target route-policy rr_ext-comm
Note
end
or
The all keyword is not required, because this is the

default behavior of a route reflector.
commit

Example:

[cancel]:
or
commit




Configuring BGP as a PE-CE Protocol

Perform this task to configure BGP on the PE and establish PE-CE communication using BGP.
SUMMARY STEPS
1.
configure
2.
3.
vrf vrf-name
4.
5.
label-allocation-mode per-ce
6.
7.
network {ip-address/prefix-length | ip-address mask}
8.
aggregate-address address/mask-length
9.
exit

12. password {clear | encrypted} password
RC-104
OL-17300-01

13. ebgp-multihop [ttl-value]

15. site-of-origin [as-number:nn | ip-address:nn]
16. as-override
17. allowas-in [as-occurrence-number]
18. route-policy route-policy-name in
19. route-policy route-policy-name out
20. end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
vrf vrf-name
Example:
RP/0/RSP0/CPU0:router(config-bgp)# vrf vrf_pe_2
Step 4
Configures a fixed router ID for a BGP-speaking router.
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# bgp
router-id 172.16.9.9
Step 5
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf)#
Configures the per-CE label allocation mode to avoid an

extra lookup on the PE router and conserve label space
(per-prefix is the default label allocation mode). In this
mode, the PE router allocates one label for every immediate
next-hop (in most cases, this would be a CE router). This
label is directly mapped to the next hop, so there is no VRF
route lookup performed during data forwarding. However,
the number of labels allocated would be one for each CE
rather than one for each VRF. Because BGP knows all the
next hops, it assigns a label for each next hop (not for each
PE-CE interface). When the outgoing interface is a
multiaccess interface and the media access control (MAC)
address of the neighbor is not known, Address Resolution
Protocol (ARP) is triggered during packet forwarding.
OL-17300-01
RC-105

Step 6
Command or Action
Purpose

Example:

Step 7
network {ip-address/prefix-length | ip-address

mask}
Originates a network prefix in the address family table in

the VRF context.
Example:
network 172.16.5.5/24
Step 8
aggregate-address address/mask-length
Example:
aggregate-address 10.0.0.0/24
Step 9
Configures aggregation in the VRF address family context

to summarize routing information to reduce the state
maintained in the core. This summarization introduces
some inefficiency in the PE edge, because an additional
lookup is required to determine the ultimate next hop for a
packet. When configured, a summary prefix is advertised
instead of a set of component prefixes, which are more
specifics of the aggregate. The PE advertises only one label
for the aggregate. Because component prefixes could have
different next hops to CEs, an additional lookup has to be
performed during data forwarding.
exit
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf-af)# exit
Step 10
neighbor ip-address
Configures a CE neighbor. The ip-address argument must

be a private address.
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# neighbor
10.0.0.0
Step 11
remote-as as-number
Configures the remote AS for the CE neighbor.
Example:
remote-as 2
Step 12
Enable Message Digest 5 (MD5) authentication on a TCP

connection between two BGP neighbors.
Example:
password encrypted 234xyz
Step 13
ebgp-multihop [ttl-value]
Example:
Configures the CE neighbor to accept and attempt BGP

connections to external peers residing on networks that are
not directly connected.
ebgp-multihop 55
RC-106
OL-17300-01

Step 14
Command or Action
Purpose

Example:

Step 15
site-of-origin [as-number:nn | ip-address:nn]
Example:
site-of-origin 234:111
Step 16
as-override
Configures AS override on the PE router. This causes the PE

router to replace the CEs ASN with its own (PE) ASN.
Example:
Note
as-override
Step 17
This loss of information could lead to routing loops;

to avoid loops caused by as-override, use it in
conjunction with site-of-origin.
allowas-in [as-occurrence-number]
Allows an AS path with the PE autonomous system number

(ASN) a specified number of times.
Example:
Hub and spoke VPN networks need the looping back of

routing information to the HUB PE through the HUB CE.
When this happens, due to the presence of the PE ASN, the
looped-back information is dropped by the HUB PE. To
avoid this, use the allowas-in command to allow prefixes
even if they have the PEs ASN up to the specified number
of times.
allowas-in 5
Step 18
Configures the site-of-origin (SoO) extended community.

Routes that are learned from this CE neighbor are tagged
with the SoO extended community before being advertised
to the rest of the PEs. SoO is frequently used to detect loops
when as-override is configured on the PE router. If the
prefix is looped back to the same site, the PE detects this
and does not send the update to the CE.
Specifies a routing policy for an inbound route. The policy

route-policy route-policy-name in
Example:
route-policy pe_ce_in_policy in
OL-17300-01
RC-107

Step 19
Command or Action
Purpose
route-policy route-policy-name out
Specifies a routing policy for an outbound route. The policy

Example:
route-policy pe_ce_out_policy out
Step 20
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr-af)# e
nd
or

commit



BGP Load Balancing

Perform this task to enable BGP multipath load sharing for external BGP (eBGP), interior BGP (iBGP),
and eIBGP and to enable BGP to carry link bandwidth attribute of the DMZ link.
When the PE router includes the link bandwidth extended community in its updates to the remote PE
through the Multiprotocol Interior BGP (MP-iBGP) session (either IPv4 or VPNv4), the remote PE
automatically does load balancing if the maximum-paths command is enabled.
SUMMARY STEPS
1.
configure
2.
3.
vrf vrf-name
4.
5.
maximum-paths {ebgp | ibgp | eibgp} maximum [unequal-cost]
6.
exit
7.
neighbor ip-address
8.
dmz-link-bandwidth
RC-108
OL-17300-01

9.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
vrf vrf-name
Example:
RP/0/RSP0/CPU0:router(config-bgp)# vrf vrf_a
Step 4

Example:

Step 5
maximum-paths {ebgp | ibgp | eibgp} maximum

[unequal-cost]
Example:
maximum-paths ebgp 3
Configures the maximum number of parallel routes that

BGP installs in the routing table. On the
Cisco ASR 9000 Series Routers, valid values for
maximum-paths are from 2 to 4, inclusive.
ebgp maximum: Consider only eBGP paths for

multipath.
ibgp maximum [unequal-cost]: Consider load

balancing between iBGP learned paths.
eibgp maximum: Consider both EBGP and IBGP

learned paths for load balancing. EIBGP load balancing
always does unequal-cost load balancing.
When eiBGP is applied, eBGP or iBGP load balancing

cannot be configured; however, eBGP and iBGP load
balancing can coexist.
Step 6
exit
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf-af)# exit
OL-17300-01
RC-109

Step 7
Command or Action
Purpose
neighbor ip-address
Configures a CE neighbor. The ip-address argument must

be a private address.
Example:
RP/0/RSP0/CPU0:router(config-bgp-vrf)# neighbor
10.0.0.0
Step 8
dmz-link-bandwidth
Originates a demilitarized-zone (DMZ) link-bandwidth

extended community for the link to an EBGP neighbor.
Example:
dmz-link-bandwidth
Step 9
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-vrf-nbr)# end
or
commit




Redistribution of IGPs to BGP

Perform this task to configure redistribution of a protocol into the VRF address family.
Even if Interior Gateway Protocols (IGPs) are used as the PE-CE protocol, the import logic happens
through BGP. Therefore, all IGP routes have to be imported into the BGP VRF table.
SUMMARY STEPS
1.
configure
2.
3.
vrf vrf-name
4.
5.

or
RC-110
OL-17300-01


route-policy-name]
or
route-policy-name]
or
or
or
6.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3
vrf vrf-name
Example:
RP/0/RSP0/CPU0:router(config-bgp)# vrf vrf_a
Step 4

Example:

OL-17300-01
RC-111

Step 5
Command or Action
Purpose

Configures redistribution of a protocol into the VRF address

family context.
or
or
The redistribute command is used if BGP is not used

between the PE-CE routers. If BGP is used between PE-CE
routers, the IGP that is used has to be redistributed into BGP
to establish VPN connectivity with other PE sites.
Redistribution is also required for inter-table import and
export.
or
route-policy-name]
or
or
Example:
redistribute eigrp 23
Step 6
end
or
commit

Example:

[cancel]:
RP/0/RSP0/CPU0:router(config-bgp-vrf-af)# end
or
commit




RC-112
OL-17300-01

Configuring Keychains for BGP

Keychains provide secure authentication by supporting different MAC authentication algorithms and
provide graceful key rollover. Perform this task to configure keychains for BGP. This task is optional.
Note
If a keychain is configured for a neighbor group or a session group, a neighbor using the group inherits
the keychain. Values of commands configured specifically for a neighbor override inherited values.
SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
4.
remote-as as-number
5.
keychain name
6.
end
or
commit
DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

peer.
neighbor ip-address
Example:
172.168.40.24
Step 4

remote-as as-number
Example:
remote-as 2002
OL-17300-01
RC-113

Step 5
Command or Action
Purpose
keychain name
Configures keychain-based authentication.
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# keychain
kych_a
Step 6
end
or
commit

Example:

[cancel]:
or




Disabling a BGP Neighbor

Perform this task to administratively shut down a neighbor session without removing the configuration.
SUMMARY STEPS
1.
configure
2.
3.
neighbor ip-address
4.
shutdown
5.
end
or
commit
RC-114
OL-17300-01

DETAILED STEPS
Step 1
Command or Action
Purpose
configure
Example:
Step 2

Example:
Step 3

peer.
neighbor ip-address
Example:
172.168.40.24
Step 4
Disables all active sessions for the specified neighbor.
shutdown
Example:
RP/0/RSP0/CPU0:router(config-bgp-nbr)# shutdown
Step 5
end
or
commit

Example:

[cancel]:
or




OL-17300-01
RC-115

Resetting Neighbors Using BGP Inbound Soft Reset

Perform this task to trigger an inbound soft reset of the specified address families for the specified group or
neighbors. The group is specified by the *, ip-address, as-number, or external keywords and arguments.
Resetting neighbors is useful if you change the inbound policy for the neighbors or any other
configuration that affects the sending or receiving of routing updates. If an inbound soft reset is
triggered, BGP sends a REFRESH request to the neighbor if the neighbor has advertised the
ROUTE_REFRESH capability. To determine whether the neighbor has advertised the
ROUTE_REFRESH capability, use the show bgp neighbors command.
SUMMARY STEPS
1.
show bgp neighbors
2.
clear bgp {ipv4 {unicast | multicast | all | tunnel} | ipv6 unicast | all {unicast | multicast | all |
tunnel} | vpnv4 unicast | vrf {vrf-name | all} {ipv4 unicast | ipv6 unicast } {* | ip-address | as
as-number | external} soft [in [prefix-filter] | out]
DETAILED STEPS
Step 1
Command or Action
Purpose
show bgp neighbors
Verifies that received route refresh capability from the

neighbor is enabled.
Example:
RP/0/RSP0/CPU0:router# show bgp neighbors
Step 2
clear bgp {ipv4 {unicast | multicast | all |

tunnel} | ipv6 unicast | all {unicast |
multicast | all | tunnel} | vpnv4 unicast | vrf
{vrf-name | all} {ipv4 unicast | ipv6 unicast}
{* | ip-address | as as-number | external}
soft [in [prefix-filter] | out]
Soft resets a BGP neighbor.
The * keyword resets all BGP neighbors.
The ip-address argument specifies the address of the

neighbor to be reset.
The as-number argument specifies that all neighbors

that match the autonomous system number be reset.
The external keyword specifies that all external

neighbors are reset.
Example:
10.0.0.1 soft in
Resetting Neighbors Using BGP Outbound Soft Reset

Perform this task to trigger an outbound soft reset of the specified address families for the specified group
or neighbors. The group is specified by the *, ip-address, as-number, or external keywords and
arguments.
Resetting neighbors is useful if you change the outbound policy for the neighbors or any other
configuration that affects the sending or receiving of routing updates.
If an outbound soft reset is triggered, BGP resends all routes for the address family to the given
neighbors.
To determine whether the neighbor has advertised the ROUTE_REFRESH capability, use the show bgp
neighbors command.
RC-116
OL-17300-01

SUMMARY STEPS
1.
show bgp neighbors
2.
DETAILED STEPS
Step 1
Command or Action
Purpose
show bgp neighbors
Verifies that received route refresh capability from the

neighbor is enabled.
Example:
Step 2

10.0.0.2 soft out
Soft resets a BGP neighbor.



Resetting Neighbors Using BGP Hard Reset

Perform this task to reset neighbors using a hard reset. A hard reset removes the TCP connection to the
neighbor, removes all routes received from the neighbor from the BGP table, and then reestablishes the
session with the neighbor. If the graceful keyword is specified, the routes from the neighbor are not
removed from the BGP table immediately, but are marked as stale. After the session is reestablished, any
stale route that has not been received again from the neighbor is removed.
SUMMARY STEPS
1.
OL-17300-01
RC-117

DETAILED STEPS
Step 1
Command or Action
Purpose

Clears a BGP neighbor.
Example:
10.0.0.3



The graceful keyword specifies a graceful restart.
Clearing Caches, Tables, and Databases

Perform this task to remove all contents of a particular cache, table, or database. The clear bgp command
resets the sessions of the specified group of neighbors (hard reset); it removes the TCP connection to the
neighbor, removes all routes received from the neighbor from the BGP table, and then re-establishes the
session with the neighbor. Clearing a cache, table, or database can become necessary when the contents
of the particular structure have become, or are suspected to be, invalid.
SUMMARY STEPS
1.
tunnel} | vpnv4 unicast | vrf {vrf-name | all} {ipv4 unicast | ipv6 unicast } ip-address
2.
clear bgp external
3.
clear bgp *
RC-118
OL-17300-01

DETAILED STEPS
Step 1
Command or Action
Purpose

ip-address
Clears a specified neighbor.
Example:
RP/0/RSP0/CPU0:router# clear bgp ipv4
172.20.1.1
Step 2
Clears all external peers.
clear bgp external
Example:
RP/0/RSP0/CPU0:router# clear bgp external
Step 3
Clears all BGP neighbors.
clear bgp *
Example:
RP/0/RSP0/CPU0:router# clear bgp *
Displaying System and Network Statistics

Perform this task to display specific statistics, such as the contents of BGP routing tables, caches, and
databases. Information provided can be used to determine resource usage and solve network problems.
You can also display information about node reachability and discover the routing path that the packets
of your device are taking through the network.
SUMMARY STEPS
1.
show bgp cidr-only
2.
show bgp community community-list [exact-match]
3.
show bgp regexp regular-expression
4.
show bgp
5.
show bgp neighbors ip-address [advertised-routes | dampened-routes | flap-statistics |

performance-statistics | received prefix-filter | routes]
6.
show bgp paths
7.
show bgp neighbor-group group-name configuration
8.
show bgp summary
OL-17300-01
RC-119

DETAILED STEPS
Step 1
Command or Action
Purpose
show bgp cidr-only
Displays routes with nonnatural network masks (classless

interdomain routing [CIDR]) routes.
Example:
RP/0/RSP0/CPU0:router# show bgp cidr-only
Step 2
show bgp community community-list [exact-match]
Displays routes that match the specified BGP community.
Example:
RP/0/RSP0/CPU0:router# show bgp community
1081:5 exact-match
Step 3
show bgp regexp regular-expression
Displays routes that match the specified autonomous

system path regular expression.
Example:
RP/0/RSP0/CPU0:router# show bgp regexp "^3 "
Step 4
show bgp
Displays entries in the BGP routing table.
Example:
RP/0/RSP0/CPU0:router# show bgp
Step 5
show bgp neighbors ip-address

[advertised-routes | dampened-routes |
flap-statistics | performance-statistics |
received prefix-filter | routes]
Example:
10.0.101.1
Step 6
show bgp paths
Displays information about the BGP connection to the

specified neighbor.
The advertised-routes keyword displays all routes the

router advertised to the neighbor.
The dampened-routes keyword displays the dampened

routes that are learned from the neighbor.
The flap-statistics keyword displays flap statistics of

the routes learned from the neighbor.
The performance-statistics keyword displays

performance statistics relating to work done by the
BGP process for this neighbor.
The received prefix-filter keyword and argument

display the received prefix list filter.
The routes keyword displays routes learned from the

neighbor.
Displays all BGP paths in the database.
Example:
RP/0/RSP0/CPU0:router# show bgp paths
RC-120
OL-17300-01

Step 7
Command or Action
Purpose
show bgp neighbor-group group-name

configuration
Displays the effective configuration for a specified neighbor

group, including any configuration inherited by this
neighbor group.
Example:
RP/0/RSP0/CPU0:router# show bgp neighbor-group
group_1 configuration
Step 8
Displays the status of all BGP connections.
show bgp summary
Example:
RP/0/RSP0/CPU0:router# show bgp summary
Displaying BGP Process Information

Perform this task to display specific BGP process information.
SUMMARY STEPS
1.
show bgp process
2.
show bgp ipv4 unicast summary
3.
show bgp vpnv4 unicast summary
4.
show bgp vrf {vrf-name | all}
5.
show bgp process detail
6.
show bgp summary
7.
show placement program bgp
8.
show placement program brib
DETAILED STEPS
Step 1
Command or Action
Purpose
show bgp process
Displays status and summary information for the BGP

process. The output shows various global and address
family-specific BGP configurations. A summary of the
number of neighbors, update messages, and notification
messages sent and received by the process is also displayed.
Example:
RP/0/RSP0/CPU0:router# show bgp process
Step 2
Displays a summary of the neighbors for the IPv4 unicast

address family.
show bgp ipv4 unicast summary
Example:
RP/0/RSP0/CPU0:router# show bgp ipv4 unicast
summary
Step 3
Displays a summary of the neighbors for the VPNv4 unicast

address family.
show bgp vpnv4 unicast summary
Example:
RP/0/RSP0/CPU0:router# show bgp vpnv4 unicast
summary
OL-17300-01
RC-121

Step 4
Command or Action
Purpose
show bgp vrf (vrf-name | all}
Displays BGP VPN virtual routing and forwarding (VRF)

information.
Example:
RP/0/RSP0/CPU0:router# show bgp vrf vrf_A
Step 5
show bgp process detail
Displays detailed process information including the

memory used by each of various internal structure types.
Example:
RP/0/RSP0/CPU0:router# show bgp processes
detail
Step 6
show bgp summary
Displays the status of all BGP connections.
Example:
RP/0/RSP0/CPU0:router# show bgp summary
Step 7
show placement program bgp
Displays BGP program information.
If a program is shown as having rejected locations

(for example, locations where program cannot be
placed), the locations in question can be viewed using
the show placement program bgp command.
If a program has been placed but not started, the amount

of elapsed time since the program was placed is
displayed in the Waiting to start column.
Example:
RP/0/RSP0/CPU0:router# show placement program
bgp
Step 8
show placement program brib
Displays bRIB program information.
If a program is shown as having rejected locations

(for example, locations where program cannot be
placed), the locations in question can be viewed using
the show placement program bgp command.
If a program has been placed but not started, the amount

of elapsed time since the program was placed is
displayed in the Waiting to start column.
Example:
RP/0/RSP0/CPU0:router# show placement program
brib
Monitoring BGP Update Groups

This task displays information related to the processing of BGP update groups.
SUMMARY STEPS
1.
show bgp [ipv4 {unicast | multicast | all | tunnel} | ipv6 unicast | all {unicast | multicast | all |
tunnel} | vpnv4 unicast | vrf {vrf-name | all} {ipv4 unicast } | ipv6 unicast}] update-group
[neighbor ip-address | process-id.index [summary | performance-statistics]]
RC-122
OL-17300-01

Configuration Examples for Implementing BGP
DETAILED STEPS
Step 1
Command or Action
Purpose
show bgp [ipv4 {unicast | multicast | all |

tunnel} | ipv6 {unicast | all } | all {unicast
| multicast | all | tunnel} | vpnv4 unicast |
vrf {vrf-name | all} [ipv4 unicast ]
update-group [neighbor ip-address |
process-id.index [summary |
performance-statistics]]
Displays information about BGP update groups.
The ip-address argument displays the update groups to

which that neighbor belongs.
The process-id.index argument selects a particular

update group to display and is specified as follows:
process ID (dot) index. Process ID range is from 0 to
254. Index range is from 0 to 4294967295.
The summary keyword displays summary information

for neighbors in a particular update group.
If no argument is specified, this command displays

information for all update groups (for the specified
address family).
The performance-statistics keyword displays

performance statistics for an update group.
Example:
RP/0/RSP0/CPU0:router# show bgp update-group
0.0

This section provides the following configuration examples:
Enabling BGP: Example, page RC-123
Displaying BGP Update Groups: Example, page RC-125
BGP Neighbor Configuration: Example, page RC-125
BGP Confederation: Example, page RC-126
BGP Route Reflector: Example, page RC-127
Enabling BGP: Example

The following shows how to enable BGP.
prefix-set static
2020::/64,
2012::/64,
10.10.0.0/16,
10.2.0.0/24
end-set
route-policy pass-all
pass
end-policy
route-policy set_next_hop_agg_v4
set next-hop 10.0.0.1
end-policy
route-policy set_next_hop_static_v4
if (destination in static) then
set next-hop 10.1.0.1
OL-17300-01
RC-123

else
drop
endif
end-policy
route-policy set_next_hop_agg_v6
set next-hop 2003::121
end-policy
route-policy set_next_hop_static_v6
if (destination in static) then
set next-hop 2011::121
else
drop
endif
end-policy
router bgp 65000
bgp fast-external-fallover disable
bgp confederation peers
65001
65002
bgp confederation identifier 1
bgp router-id 1.1.1.1
aggregate-address 10.2.0.0/24 route-policy set_next_hop_agg_v4
redistribute static route-policy set_next_hop_static_v4
aggregate-address 10.2.0.0/24 route-policy set_next_hop_agg_v4
aggregate-address 2012::/64 route-policy set_next_hop_agg_v6
aggregate-address 2013::/64
aggregate-address 2012::/64 route-policy set_next_hop_agg_v6
aggregate-address 2013::/64
remote-as 65000
remote-as 65000
remote-as 3
route-policy pass-all in
route-policy pass-all out
remote-as 5
update-source Loopback0
RC-124
OL-17300-01

Displaying BGP Update Groups: Example

The following is sample output from the show bgp update-group command run in EXEC mode:
RP/0/RSP0/CPU0:router# show bgp update-group
Update group for IPv4 Unicast, index 0.1:
Attributes:
Outbound Route map:rm
Minimum advertisement interval:30
Messages formatted:2, replicated:2
Neighbors in this update group:
10.0.101.92
Update group for IPv4 Unicast, index 0.2:
Attributes:
Minimum advertisement interval:30
Messages formatted:2, replicated:2
Neighbors in this update group:
10.0.101.91
BGP Neighbor Configuration: Example

The following example shows how BGP neighbors on an autonomous system are configured to share
information. In the example, a BGP router is assigned to autonomous system 109, and two networks are
listed as originating in the autonomous system. Then the addresses of three remote routers (and their
autonomous systems) are listed. The router being configured shares information about networks
172.16.0.0 and 192.168.7.0 with the neighbor routers. The first router listed is in a different autonomous
system; the second neighbor and remote-as commands specify an internal neighbor (with the same
autonomous system number) at address 172.26.234.2; and the third neighbor and remote-as commands
specify a neighbor on a different autonomous system.
route-policy pass-all
pass
end-policy
router bgp 109
network 172.16.0.0 255.255.0.0
network 192.168.7.0 255.255.0.0
neighbor 172.16.200.1
remote-as 167
exit
route-policy pass-out out
neighbor 172.26.234.2
remote-as 109
exit
neighbor 172.26.64.19
remote-as 99
exit
OL-17300-01
RC-125

BGP Confederation: Example

The following is a sample configuration that shows several peers in a confederation. The confederation
consists of three internal autonomous systems with autonomous system numbers 6001, 6002, and 6003.
To the BGP speakers outside the confederation, the confederation looks like a normal autonomous
system with autonomous system number 666 (specified using the bgp confederation identifier
command).
In a BGP speaker in autonomous system 6001, the bgp confederation peers command marks the peers
from autonomous systems 6002 and 6003 as special eBGP peers. Hence, peers 171.16.232.55 and
171.16.232.56 get the local preference, next hop, and MED unmodified in the updates. The router at
171.19.69.1 is a normal eBGP speaker, and the updates received by it from this peer are just like a normal
eBGP update from a peer in autonomous system 666.
router bgp 6001
6002
6003
exit
neighbor 171.16.232.55
remote-as 6002
exit
neighbor 171.16.232.56
remote-as 6003
exit
remote-as 777
In a BGP speaker in autonomous system 6002, the peers from autonomous systems 6001 and 6003 are
configured as special eBGP peers. Peer 171.17.70.1 is a normal iBGP peer, and peer 199.99.99.2 is a
normal eBGP peer from autonomous system 700.
router bgp 6002
6001
6003
exit
remote-as 6002
exit
neighbor 171.19.232.57
remote-as 6001
exit
neighbor 171.19.232.56
remote-as 6003
exit
remote-as 700
exit
RC-126
OL-17300-01

In a BGP speaker in autonomous system 6003, the peers from autonomous systems 6001 and 6002 are
configured as special eBGP peers. Peer 192.168.200.200 is a normal eBGP peer from autonomous
system 701.
router bgp 6003
6001
6002
exit
neighbor 171.19.232.57
remote-as 6001
exit
neighbor 171.19.232.55
remote-as 6002
exit
neighbor 192.168.200.200
remote-as 701
exit
The following is a part of the configuration from the BGP speaker 192.168.200.205 from autonomous
system 701 in the same example. Neighbor 171.16.232.56 is configured as a normal eBGP speaker from
autonomous system 666. The internal division of the autonomous system into multiple autonomous
systems is not known to the peers external to the confederation.
router bgp 701
neighbor 172.16.232.56
remote-as 666
exit
exit
neighbor 192.168.200.205
remote-as 701
BGP Route Reflector: Example

The following example shows how to use an address family to configure internal BGP peer 10.1.1.1 as
a route reflector client for both unicast and multicast prefixes:
router bgp 140
neighbor 10.1.1.1
remote-as 140
exit
OL-17300-01
RC-127

Where to Go Next
Where to Go Next
For detailed information about BGP commands, see Cisco ASR 9000 Series
Aggregation Services Router Routing Command Reference document.
Additional References
The following sections provide references related to implementing BGP for Cisco IOS XR software.
Related Documents
Related Topic
Document Title
BGP commands: complete command syntax, command Cisco ASR 9000 Series Aggregation Services Router Routing
modes, command history, defaults, usage guidelines,
Command Reference
and examples
Cisco Express Forwarding (CEF) commands: complete Cisco ASR 9000 Series Aggregation Services Router IP Addresses
command syntax, command modes, command history, and Services Command Reference
defaults, usage guidelines, and examples
MPLS VPN configuration information.
Cisco ASR 9000 Series Aggregation Services Router Multiprotocol

Label Switching Configuration Guide
Bidirectional Forwarding Detection (BFD)
Cisco ASR 9000 Series Aggregation Services Router Interface and

Hardware Configuration Guide and Cisco ASR 9000 Series
Aggregation Services Router Interface and Hardware Command
Reference
Task ID information.
Configuring AAA Services on Cisco ASR 9000 Series Routers

module of Cisco ASR 9000 Series Aggregation Services Router
System Security Configuration Guide
Standards
Standards
Title
draft-bonica-tcp-auth-05.txt
Authentication for TCP-based Routing and Management Protocols,

by R. Bonica, B. Weis, S. Viswanathan, A. Lange, O. Wheeler
draft-ietf-idr-bgp4-26.txt
A Border Gateway Protocol 4, by Y. Rekhter, T.Li, S. Hares
draft-ietf-idr-bgp4-mib-15.txt
Definitions of Managed Objects for the Fourth Version of Border

Gateway Protocol (BGP-4), by J. Hass and S. Hares
draft-ietf-idr-cease-subcode-05.txt
Subcodes for BGP Cease Notification Message, by Enke Chen, V.

Gillet
draft-ietf-idr-avoid-transition-00.txt
Avoid BGP Best Path Transitions from One External to Another, by

Enke Chen, Srihari Sangli
draft-ietf-idr-as4bytes-12.txt
BGP Support for Four-octet AS Number Space, by Quaizar Vohra,

Enke Chen
RC-128
OL-17300-01

MIBs
MIBs
MIBs Link
To locate and download MIBs using Cisco IOS XR software, use the
Cisco MIB Locator found at the following URL and choose a
platform under the Cisco Access Products menu:
http://cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
RFCs
RFCs
Title
RFC 1700
Assigned Numbers
RFC 1997
BGP Communities Attribute
RFC 2385
Protection of BGP Sessions via the TCP MD5 Signature Option
RFC 2439
BGP Route Flap Damping
RFC 2545
Use of BGP-4 Multiprotocol Extensions for IPv6 Inter-Domain

Routing
RFC 2796
BGP Route Reflection - An Alternative to Full Mesh IBGP
RFC 2858
Multiprotocol Extensions for BGP-4
RFC 2918
Route Refresh Capability for BGP-4
RFC 3065
Autonomous System Confederations for BGP
RFC 3392
Capabilities Advertisement with BGP-4
RFC 4271
A Border Gateway Protocol 4 (BGP-4)
RFC 4364
BGP/MPLS IP Virtual Private Networks (VPNs)
RFC 4724
Graceful Restart Mechanism for BGP
Technical Assistance
Description
Link
http://www.cisco.com/techsupport
The Cisco Technical Support website contains
thousands of pages of searchable technical content,
including links to products, technologies, solutions,
technical tips, and tools. Registered Cisco.com users
can log in from this page to access even more content.
OL-17300-01
RC-129

RC-130
OL-17300-01

Implementing BGP On ASR 9K

Uploaded by

Copyright:

Available Formats

Implementing BGP On ASR 9K

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Implementing BGP On ASR 9K

Uploaded by

Copyright:

Available Formats

Implementing BGP on

Cisco ASR 9000 Series Routers

This feature was introduced on Cisco ASR 9000 Series Routers.

Prerequisites for Implementing BGP, page RC-2

Information About Implementing BGP, page RC-2

How to Implement BGP, page RC-39

Configuration Examples for Implementing BGP, page RC-123

Where to Go Next, page RC-128

Additional References, page RC-128

Implementing BGP on Cisco ASR 9000 Series Routers

Prerequisites for Implementing BGP

Information About Implementing BGP

BGP Functional Overview, page RC-2

BGP Router Identifier, page RC-3

BGP Default Limits, page RC-3

BGP Next Hop Tracking, page RC-4

Autonomous System Number Formats in BGP, page RC-6

BGP Configuration, page RC-6

No Default Address Family, page RC-19

Routing Policy Enforcement, page RC-19

Table Policy, page RC-21

Update Groups, page RC-21

BGP Cost Community, page RC-22

BGP Best Path Algorithm, page RC-26

Administrative Distance, page RC-30

Multiprotocol BGP, page RC-31

Route Dampening, page RC-33

BGP Routing Domain Confederation, page RC-34

BGP Route Reflectors, page RC-34

Default Address Family for show Commands, page RC-37

Distributed BGP, page RC-37

MPLS VPN Carrier Supporting Carrier, page RC-38

BGP Keychains, page RC-39

How to Implement BGP, page RC-39

BGP Functional Overview

Implementing BGP on Cisco ASR 9000 Series Routers

BGP Router Identifier

BGP Default Limits

Implementing BGP on Cisco ASR 9000 Series Routers

BGP Next Hop Tracking

Determine whether a next hop is reachable.

Validate the received next hops.

Calculate the outgoing next hops.

Verify the reachability and connectedness of neighbors.

BGP is notified when any of the following events occurs:

Next hop becomes unreachable

Next hop becomes reachable

Fully recursed IGP metric to the next hop changes

First hop IP address or first hop interface change

Next hop becomes connected

Next hop becomes unconnected

Next hop becomes a local address

Next hop becomes a nonlocal address

Implementing BGP on Cisco ASR 9000 Series Routers

Reachability and recursed metric events trigger a best-path recalculation.

Scoped IPv4/VPNv4 Table Walk

Reordered Address Family Processing

IPv4 labeled unicast