AIT Posted June 8, 2011 Posted June 8, 2011 Hi, We have a slight issue at the moment routing traffic to Newzealand. We have 2 routers set up with HSRP (for redundancy) both going to the virgin media network. Both routers are configured in an active active state with traffic for 46.18.48.0/22 coming in on one and 46.18.52.0/22 coming in on the other. my only conclusion is the route must not be publishing correctly through bgp. just wondering if anyone could have a look at this and see what they think: BGP for 1st router: router bgp 23456 no synchronization bgp log-neighbor-changes network 46.18.48.0 mask 255.255.248.0 network 46.18.48.0 mask 255.255.252.0 neighbor 82.0.246.10 remote-as 5089 neighbor 82.0.246.10 soft-reconfiguration inbound no auto-summary BGP for 2nd router: router bgp 23456 no synchronization bgp log-neighbor-changes network 46.18.48.0 mask 255.255.248.0 network 46.18.52.0 mask 255.255.252.0 neighbor 62.255.228.30 remote-as 5089 neighbor 62.255.228.30 soft-reconfiguration inbound no auto-summary my question is really should i have the network 46.18.48.0 mask 255.255.252.0 statement and the network 46.18.52.0 mask 255.255.252.0 Thanks Phil
RW_LUNS Posted June 8, 2011 Posted June 8, 2011 Hi Phil What behaviour are you looking for? What part isn't working at the moment? Rob
RW_LUNS Posted June 8, 2011 Posted June 8, 2011 I should add, from our routing tables at the moment I'm only seeing the 46.18.48.0/21 route. Does your cisco actually have a direct or static route for the /22 subnets? (do a show route for them) Just adding the network statement to BGP won't advertise those networks unless your router has a route for them itself. You could add a local "reject route" static or aggregate which should make it advertise (assuming virgin are allowing you to advertise any length of prefix within your /21). Rob 1
AIT Posted June 8, 2011 Author Posted June 8, 2011 Thanks Rob. Yes it does in both case each router has a route to the other /22 e.g. ip route 46.18.48.0 255.255.248.0 FastEthernet0/1 and that's what i expected you to only see the /21 route. This is the strange thing its working as i expected except for half way to newzeland. we are trying to get to mx.clear.net.nz (203.97.33.212) Doing a traceroute i stop at: 0.gigabitethernet-2-0-0.GW6.akl1.alter.net (210.80.35.10)
markcuk Posted June 8, 2011 Posted June 8, 2011 my friend got this Tracing route to fax.telstraclear.co.nz [203.97.33.212] over a maximum of 30 hops: 1 <1 ms 1 ms <1 ms 192.168.1.1 2 113 ms 106 ms 102 ms 10.2.28.1 3 89 ms 125 ms 151 ms bagu-cam-1a-ge87.network.virginmedia.net [80.5.1 63.181] 4 93 ms 101 ms 120 ms bagu-core-1a-ae1-0.network.virginmedia.net [195. 182.175.1] 5 125 ms 115 ms 107 ms manc-bb-1a-as5-0.network.virginmedia.net [80.5.1 61.37] 6 137 ms 127 ms 127 ms 212.187.136.125 7 123 ms 109 ms 106 ms ae-4-4.ebr1.London1.Level3.net [4.69.133.102] 8 100 ms 113 ms 95 ms vlan103.ebr2.London1.Level3.net [4.69.143.94] 9 185 ms 193 ms 211 ms ae-42-42.ebr1.NewYork1.Level3.net [4.69.137.70] 10 202 ms 220 ms 207 ms ae-4-4.ebr1.NewYork2.Level3.net [4.69.141.18] 11 185 ms 195 ms 182 ms ae-1-51.edge2.NewYork2.Level3.net [4.69.138.195] 12 164 ms 192 ms 213 ms 0.xe-1-0-0.BR2.NYC4.ALTER.NET [204.255.173.53] 13 187 ms 219 ms 197 ms 0.ae2.XL4.NYC4.ALTER.NET [152.63.3.117] 14 189 ms 163 ms 186 ms 0.xe-3-2-0.IL4.LAX9.ALTER.NET [152.63.115.102] 15 220 ms 245 ms 245 ms 0.ge-7-0-0.IL2.LAX12.ALTER.NET [152.63.114.18] 16 359 ms 374 ms 360 ms 0.so-3-1-0.XT4.AKL1.Alter.Net [210.80.50.90] 17 398 ms 395 ms 383 ms 0.gigabitethernet-3-0-0.GW6.AKL1.ALTER.NET [210. 80.35.18] 18 426 ms 453 ms 423 ms 210.80.27.6 19 458 ms 394 ms 403 ms ie1-g-0-0-0.telstraclear.net [203.98.50.1] 20 409 ms 428 ms 415 ms front2-clix.clear.net.nz [203.167.243.213] 21 401 ms 406 ms 374 ms fax.telstraclear.co.nz [203.97.33.212] Trace complete.
AIT Posted June 8, 2011 Author Posted June 8, 2011 (edited) i should expand: see my traceroute Tracing route to mx.clear.net.nz [203.97.33.212] over a maximum of 30 hops: 1 5 ms 2 ms 1 ms 10.10.1.3 2 <1 ms <1 ms <1 ms 46.18.52.2 3 1 ms 1 ms 1 ms nott-lam-3-tenge74-2945.network.virginmedia.net [62.255.228.30] 4 1 ms 1 ms 1 ms nott-core-1a-ge-500-0.network.virginmedia.net [80.1.79.125] 5 4 ms 4 ms 5 ms leed-bb-1a-as0-0.network.virginmedia.net [213.105.174.169] 6 10 ms 25 ms 9 ms 213.152.245.53 7 8 ms 8 ms 8 ms ge-4-2-0.mpr1.lhr3.uk.above.net [64.125.27.157] 8 83 ms 134 ms 82 ms xe-4-3-0.cr2.dca2.us.above.net [64.125.24.41] 9 83 ms 83 ms 83 ms xe-0-1-0.er2.iad10.us.above.net [64.125.31.210] 10 83 ms 86 ms 83 ms above-uu.iad10.us.above.net [64.125.13.174] 11 83 ms 193 ms 83 ms 0.ae1.XL3.IAD8.ALTER.NET [152.63.33.118] 12 154 ms 163 ms 195 ms 0.ge-3-0-4.IL3.LAX9.ALTER.NET [152.63.115.125] 13 154 ms 154 ms 154 ms 0.ge-7-0-0.IL1.LAX12.ALTER.NET [152.63.114.10] 14 312 ms 315 ms 314 ms 0.ge-6-0-0.XT3.AKL1.ALTER.NET [210.80.35.1] 15 298 ms 298 ms 280 ms 0.gigabitethernet-2-0-0.GW6.AKL1.ALTER.NET [210.80.35.10] 16 * * * Request timed out. 17 but then the hard part is we have some original ips from virgin media themselves 81.109.165.33 and if i do a traceroute from one of those ips (going through the same routers!!) it works fine.. and see below: Tracing route to mx.clear.net.nz [203.97.33.212] over a maximum of 30 hops: 1 <1 ms <1 ms <1 ms 46.18.52.2 2 <1 ms <1 ms <1 ms nott-lam-3-tenge74-2945.network.virginmedia.net [62.255.228.30] 3 1 ms 1 ms <1 ms nott-core-1b-ge-500-0.network.virginmedia.net [80.1.79.241] 4 2 ms 42 ms 2 ms nrth-bb-1b-as1-0.network.virginmedia.net [213.105.174.173] 5 6 ms 6 ms 6 ms ae0.lon11.ip4.tinet.net [77.67.65.157] 6 75 ms 108 ms 75 ms xe-0-0-0.nyc32.ip4.tinet.net [89.149.184.182] 7 75 ms 75 ms 75 ms TenGigE0-0-1-0.GW8.NYC4.ALTER.NET [152.179.72.121] 8 75 ms 75 ms 75 ms 0.xe-1-1-3.XL4.NYC4.ALTER.NET [152.63.21.134] 9 151 ms 142 ms 142 ms 0.xe-3-2-0.IL4.LAX9.ALTER.NET [152.63.115.102] 10 142 ms 142 ms 142 ms 0.ge-7-0-0.IL2.LAX12.ALTER.NET [152.63.114.18] 11 275 ms 287 ms 275 ms 0.so-3-1-0.XT4.AKL1.Alter.Net [210.80.50.90] 12 286 ms 268 ms 268 ms 0.gigabitethernet-3-0-0.GW6.AKL1.ALTER.NET [210.80.35.18] 13 289 ms 271 ms 290 ms 210.80.27.6 14 275 ms 312 ms 272 ms ie1-g-0-0-0.telstraclear.net [203.98.50.1] 15 293 ms 275 ms 275 ms front2-clix.clear.net.nz [203.167.243.213] 16 274 ms 279 ms 292 ms mx.clear.net.nz [203.97.33.212] Trace complete. Edited June 8, 2011 by AIT
markcuk Posted June 8, 2011 Posted June 8, 2011 my friend is on talk talk in manchester and here are the results Tracing route to mx.clear.net.nz [203.97.33.212] over a maximum of 30 hops: 1 1 ms 2 ms 1 ms 192.168.1.1 2 96 ms 32 ms 134 ms 10.2.28.1 3 122 ms 95 ms 97 ms bagu-cam-1a-ge87.network.virginmedia.net [80.5.1 63.181] 4 113 ms 88 ms 138 ms bagu-core-1a-ae1-0.network.virginmedia.net [195. 182.175.1] 5 103 ms 97 ms 125 ms manc-bb-1a-as5-0.network.virginmedia.net [80.5.1 61.37] 6 159 ms 157 ms 137 ms 212.187.136.125 7 19 ms 27 ms 23 ms ae-4-4.ebr1.London1.Level3.net [4.69.133.102] 8 27 ms 34 ms 24 ms vlan103.ebr2.London1.Level3.net [4.69.143.94] 9 137 ms 115 ms 119 ms ae-42-42.ebr1.NewYork1.Level3.net [4.69.137.70] 10 96 ms 94 ms 119 ms ae-4-4.ebr1.NewYork2.Level3.net [4.69.141.18] 11 95 ms 104 ms 108 ms ae-1-51.edge2.NewYork2.Level3.net [4.69.138.195] 12 88 ms 124 ms 98 ms 0.xe-1-0-0.BR2.NYC4.ALTER.NET [204.255.173.53] 13 193 ms 149 ms 125 ms 0.ae2.XL4.NYC4.ALTER.NET [152.63.3.117] 14 175 ms 262 ms 253 ms 0.xe-3-2-0.IL4.LAX9.ALTER.NET [152.63.115.102] 15 250 ms 257 ms 262 ms 0.ge-7-0-0.IL2.LAX12.ALTER.NET [152.63.114.18] 16 295 ms 340 ms 333 ms 0.so-3-1-2.XT4.AKL1.Alter.Net [210.80.50.94] 17 398 ms 375 ms 336 ms 0.gigabitethernet-3-0-0.GW6.AKL1.ALTER.NET [210. 80.35.18] 18 318 ms 339 ms 351 ms 210.80.27.6 19 315 ms 318 ms 355 ms ie1-g-0-0-0.telstraclear.net [203.98.50.1] 20 374 ms 410 ms 399 ms front2-clix.clear.net.nz [203.167.243.213] 21 386 ms 334 ms 301 ms fax.telstraclear.co.nz [203.97.33.212] Trace complete.
SYNACK Posted June 8, 2011 Posted June 8, 2011 Could be a problem with the route injection on the Clear end, can you get an active connection to other peering points in NZ like mail.orcon.net.nz or mx1.iconz.co.nz which could be on different routes. Every so often one of the upstream providers for NZ ISPs do stuff up and break some routes and it is generally only when someone complains that they figure it out and sort it. I have a route to you from Orcon here in NZ, 22 hops away but still: 3 42 ms 38 ms 40 ms xe-1-0-0.cre1.nct.orcon.net.nz [121.98.9.13] 4 41 ms 40 ms 64 ms 121.99.12.0 5 166 ms 167 ms 197 ms xe-0-1-0.cre1.la1.odyssey.net.nz [38.104.84.30] 6 166 ms 165 ms 165 ms te4-4.mpd01.lax05.atlas.cogentco.com [38.104.84. 29] 7 166 ms 166 ms 166 ms te0-2-0-2.mpd22.lax01.atlas.cogentco.com [154.54 .3.141] 8 202 ms 201 ms 202 ms te0-2-0-5.mpd22.iah01.atlas.cogentco.com [154.54 .0.250] 9 228 ms 230 ms 229 ms te0-1-0-3.mpd22.atl01.atlas.cogentco.com [154.54 .5.54] 10 229 ms 229 ms 228 ms te0-0-0-3.mpd22.dca01.atlas.cogentco.com [154.54 .28.209] 11 234 ms 234 ms 234 ms te0-5-0-2.mpd22.jfk02.atlas.cogentco.com [154.54 .42.38] 12 313 ms 314 ms 313 ms te0-4-0-7.ccr21.bos01.atlas.cogentco.com [154.54 .44.26] 13 314 ms 313 ms 313 ms te3-2.mpd02.lon01.atlas.cogentco.com [66.28.4.19 0] 14 313 ms 313 ms 312 ms te1-7.mpd01.lon01.atlas.cogentco.com [130.117.2. 25] 15 314 ms 313 ms 314 ms te1-2.ccr01.lon04.atlas.cogentco.com [130.117.3. 190] 16 310 ms 319 ms 310 ms ntl.lon04.atlas.cogentco.com [130.117.15.70] 17 314 ms 313 ms 313 ms brnt-bb-1b-as0-0.network.virginmedia.net [62.253 .185.73] 18 310 ms 318 ms 310 ms brnt-bb-1b-ae5-0.network.virginmedia.net [213.10 5.159.49] 19 376 ms 322 ms 319 ms leed-bb-1a-as6-0.network.virginmedia.net [213.10 5.175.25] 20 322 ms 321 ms 320 ms nott-core-1a-as0-0.network.virginmedia.net [213. 105.174.170] 21 322 ms 322 ms 321 ms nott-lam-3-tenge71.network.virginmedia.net [80.1 .79.126] 22 319 ms 318 ms 318 ms 46.18.52.2
AIT Posted June 8, 2011 Author Posted June 8, 2011 yup can get to/trace to mail.orcon.net.nz or mx1.iconz.co.nz a phone call to alter.net?
SYNACK Posted June 8, 2011 Posted June 8, 2011 (edited) Could be a good plan, usually the people who run the routing are alright if you can get in touch with them. There may be a contact on their AS record that you could use, this might be it but I am uncertain: Edit: I was wrong, this one I think: http://www.bgp.he.net/AS703#_whois Edited June 8, 2011 by SYNACK
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now