1
00:00:00,000 --> 00:00:00,946

2
00:00:00,946 --> 00:00:02,365
[AUDIO LOGO]

3
00:00:02,365 --> 00:00:08,050

4
00:00:08,050 --> 00:00:11,860
So now that we have our
iBGP peers up and running

5
00:00:11,860 --> 00:00:18,010
in AS 65001 and
65002, now it's time

6
00:00:18,010 --> 00:00:20,080
to get the neighborships
up and running

7
00:00:20,080 --> 00:00:23,410
between the confederation ASes.

8
00:00:23,410 --> 00:00:28,280
So this will be bringing
AS 65003 in as well,

9
00:00:28,280 --> 00:00:31,512
and this is going
to take a few steps.

10
00:00:31,512 --> 00:00:33,220
The first thing we're
going to have to do

11
00:00:33,220 --> 00:00:38,530
is teach each of the routers
what the overall confederation

12
00:00:38,530 --> 00:00:40,150
AS number is.

13
00:00:40,150 --> 00:00:43,270
In this case, we're
going to be using 100.

14
00:00:43,270 --> 00:00:45,790
Then, for the
routers that actually

15
00:00:45,790 --> 00:00:50,440
have to peer with another router
in a different confederation

16
00:00:50,440 --> 00:00:55,240
AS, we have to tell it that
those are other routers,

17
00:00:55,240 --> 00:00:57,760
even though they're
in a different AS that

18
00:00:57,760 --> 00:00:59,740
are in the same confederation.

19
00:00:59,740 --> 00:01:02,740
So we're going to have to
configure our confederation

20
00:01:02,740 --> 00:01:04,030
peers.

21
00:01:04,030 --> 00:01:06,340
And then, of course,
we have to configure

22
00:01:06,340 --> 00:01:08,630
the actual neighborships
themselves.

23
00:01:08,630 --> 00:01:11,890
So there's a few steps
to this, plus we'll

24
00:01:11,890 --> 00:01:15,890
be bringing in AS 65003
for the first time,

25
00:01:15,890 --> 00:01:19,040
so Router 9 is not
even configured yet.

26
00:01:19,040 --> 00:01:23,290
So as usual, let's jump in and
take a look at that topology

27
00:01:23,290 --> 00:01:25,120
just so we remember
what we're doing

28
00:01:25,120 --> 00:01:27,050
in this video, and
then, of course,

29
00:01:27,050 --> 00:01:31,040
we'll jump into the command
line and get it all set up.

30
00:01:31,040 --> 00:01:32,950
So what we'll be
configuring here

31
00:01:32,950 --> 00:01:40,570
is the connection from R1 to R9,
then we'll configure R2 to R9.

32
00:01:40,570 --> 00:01:45,280
R1 is going to be configured
with a neighborship to R6,

33
00:01:45,280 --> 00:01:49,522
and R3 is going to have
a neighborship to R7.

34
00:01:49,522 --> 00:01:51,730
So those are the things
we're going to be focusing on

35
00:01:51,730 --> 00:01:53,030
in this video.

36
00:01:53,030 --> 00:01:55,030
So let's go ahead and jump in.

37
00:01:55,030 --> 00:02:02,860
Once again, we'll just start
in AS 65001 with Router 1.

38
00:02:02,860 --> 00:02:06,290
So starting off here on
Router 1, we'll of course,

39
00:02:06,290 --> 00:02:09,919
go into our BGP process,
and like we said,

40
00:02:09,919 --> 00:02:12,010
there's a few steps.

41
00:02:12,010 --> 00:02:15,250
Router 1, remember,
is going to be peering

42
00:02:15,250 --> 00:02:19,480
with Router 6,
which is in 65002,

43
00:02:19,480 --> 00:02:24,730
and Router 9, which
is in 65003, which

44
00:02:24,730 --> 00:02:28,720
means that we need to tell
it that both of those ASes

45
00:02:28,720 --> 00:02:32,710
are confederation peers.

46
00:02:32,710 --> 00:02:35,080
It'll drop us into a
subconfiguration mode,

47
00:02:35,080 --> 00:02:38,560
and then we just list
out the AS numbers

48
00:02:38,560 --> 00:02:41,740
that we're going to be peering
with that we should consider

49
00:02:41,740 --> 00:02:43,000
peers.

50
00:02:43,000 --> 00:02:45,190
The next thing we
want to configure

51
00:02:45,190 --> 00:02:48,400
is the BGP confederation
identifier.

52
00:02:48,400 --> 00:02:51,070
This, of course,
is the AS number

53
00:02:51,070 --> 00:02:55,520
that we're going to be seen
as to the rest of the world.

54
00:02:55,520 --> 00:02:59,500
Now, the BGP
confederation peers only

55
00:02:59,500 --> 00:03:02,530
needs to be configured
on the routers that

56
00:03:02,530 --> 00:03:05,020
are going to actually
be having neighborships

57
00:03:05,020 --> 00:03:09,670
with routers in those
confederation peer AS numbers.

58
00:03:09,670 --> 00:03:13,240
The BGP confederation
identifier really

59
00:03:13,240 --> 00:03:16,750
should be set on every
router in the confederation

60
00:03:16,750 --> 00:03:19,540
whether they have peers or not.

61
00:03:19,540 --> 00:03:23,680
That way, everybody knows that
they're part of a confederation

62
00:03:23,680 --> 00:03:28,700
and they know what the outside
confederation AS number is.

63
00:03:28,700 --> 00:03:32,140
So this should really be set
on all the routers regardless

64
00:03:32,140 --> 00:03:36,460
of their peering if
they're in a confederation.

65
00:03:36,460 --> 00:03:38,080
So that being the
case, we'll end up

66
00:03:38,080 --> 00:03:42,880
just setting this on everything,
but certainly here on Router 1.

67
00:03:42,880 --> 00:03:45,490
Next thing we have
to do is start

68
00:03:45,490 --> 00:03:47,530
configuring our neighborships.

69
00:03:47,530 --> 00:03:51,140
Now, like we said, these will
be two physical addresses.

70
00:03:51,140 --> 00:03:57,490
So 50.0.167.6, that
would be Router 6.

71
00:03:57,490 --> 00:04:01,450
That's in remote
AS 65002, and we'll

72
00:04:01,450 --> 00:04:03,580
activate the address family.

73
00:04:03,580 --> 00:04:08,200
Next neighbor is 50.1.19.9.

74
00:04:08,200 --> 00:04:10,000
That's Router 9.

75
00:04:10,000 --> 00:04:14,560
It's remote AS will
be 65003 and it also

76
00:04:14,560 --> 00:04:17,170
has to have the address
family activated.

77
00:04:17,170 --> 00:04:21,310
We'll commit our changes and
we'll exit configuration.

78
00:04:21,310 --> 00:04:24,190
That should take care of the
configuration on Router 1.

79
00:04:24,190 --> 00:04:26,410
Let's jump over to Router 2.

80
00:04:26,410 --> 00:04:29,530
Once again, we go
into the BGP process.

81
00:04:29,530 --> 00:04:32,830
For confederation
peers here, Router 2

82
00:04:32,830 --> 00:04:35,860
is only going to be configured
to pair with Router 9,

83
00:04:35,860 --> 00:04:39,160
so it doesn't know about 65002.

84
00:04:39,160 --> 00:04:43,060
It only has to know about 65003.

85
00:04:43,060 --> 00:04:47,290
Just to answer another common
question I get here sometimes,

86
00:04:47,290 --> 00:04:52,100
first, do I have to list all
the confederation ASes here?

87
00:04:52,100 --> 00:04:55,490
And as I sort of just explained,
the answer to that is no.

88
00:04:55,490 --> 00:04:58,870
We only have to list the
ones that this router itself

89
00:04:58,870 --> 00:05:01,110
are going to be peering with.

90
00:05:01,110 --> 00:05:04,150
Then, of course, the secondary
or follow-up question

91
00:05:04,150 --> 00:05:07,610
is usually, but does
it matter if I do?

92
00:05:07,610 --> 00:05:09,760
And the answer to
that is also no.

93
00:05:09,760 --> 00:05:14,270
If I put 65002 here, it
wouldn't hurt anything.

94
00:05:14,270 --> 00:05:17,170
And if I ever did make
a peering relationship

95
00:05:17,170 --> 00:05:20,800
to a router in 65002 from
here, it would already

96
00:05:20,800 --> 00:05:22,690
know it's a confederation peer.

97
00:05:22,690 --> 00:05:25,720
So there's sort of two different
approaches you can take.

98
00:05:25,720 --> 00:05:28,660
Either just list all
your Confederation peers

99
00:05:28,660 --> 00:05:33,740
on every router, or just list
them as needed as you go.

100
00:05:33,740 --> 00:05:38,260
I'm going to do as needed as
you go just to sort of prove

101
00:05:38,260 --> 00:05:40,210
that everything is
going to work like this

102
00:05:40,210 --> 00:05:43,300
and you don't have to list
all of them on every router.

103
00:05:43,300 --> 00:05:46,270
But again, it wouldn't
hurt if you did.

104
00:05:46,270 --> 00:05:50,380
In fact, I a lot of
environments that do just that.

105
00:05:50,380 --> 00:05:52,990
But we'll leave it with
just the ones we need.

106
00:05:52,990 --> 00:05:56,820
So that means our next
command is identifier,

107
00:05:56,820 --> 00:05:59,077
and we know that that's 100.

108
00:05:59,077 --> 00:06:00,660
We'll go back into
our address family.

109
00:06:00,660 --> 00:06:02,520
We'll configure our neighbor.

110
00:06:02,520 --> 00:06:05,340
This is going to be 50.1.29.9.

111
00:06:05,340 --> 00:06:07,410
That's Router 9.

112
00:06:07,410 --> 00:06:10,800
It's in remote AS 65003.

113
00:06:10,800 --> 00:06:14,370
We'll enable the address
family, commit the changes,

114
00:06:14,370 --> 00:06:16,600
and exit configuration.

115
00:06:16,600 --> 00:06:19,064
Next up, we have to
configure Router 3.

116
00:06:19,064 --> 00:06:22,860
Router 3 is going to be
peering with Router 7.

117
00:06:22,860 --> 00:06:29,020
Once again, the confederation
peers, 65002 in this case.

118
00:06:29,020 --> 00:06:33,240
Again, this one
doesn't need 65003.

119
00:06:33,240 --> 00:06:35,820
And the confederation
identifier.

120
00:06:35,820 --> 00:06:37,590
Address family.

121
00:06:37,590 --> 00:06:41,610
The neighbor is 50.1.37..7.

122
00:06:41,610 --> 00:06:45,180
Remote AS, of course, is 65002.

123
00:06:45,180 --> 00:06:51,210
Address family IPv4 unicast,
commit the changes, and exit.

124
00:06:51,210 --> 00:06:53,850
Now, Router 4 and 5
don't have any peerings,

125
00:06:53,850 --> 00:06:55,260
but again, like
I mentioned, they

126
00:06:55,260 --> 00:06:58,650
should at least get the
confederation identifier.

127
00:06:58,650 --> 00:07:01,080
So we'll go over to Router 4.

128
00:07:01,080 --> 00:07:03,930
We'll simply set the
confederation ID,

129
00:07:03,930 --> 00:07:06,930
commit the changes, and exit.

130
00:07:06,930 --> 00:07:09,570
We'll do the same
thing on Router 5.

131
00:07:09,570 --> 00:07:13,980
We'll go into Configuration,
and it's the same command here,

132
00:07:13,980 --> 00:07:16,115
and we'll exit Configuration.

133
00:07:16,115 --> 00:07:19,350
OK, so that should
take care of 65001.

134
00:07:19,350 --> 00:07:22,170
Now let's jump over to 65002.

135
00:07:22,170 --> 00:07:24,330
We'll start on Router 6.

136
00:07:24,330 --> 00:07:26,940
We'll start by going into BGP.

137
00:07:26,940 --> 00:07:29,640
We'll start with
confederation peers.

138
00:07:29,640 --> 00:07:32,650
Here on iOS XE, it's a
little bit different.

139
00:07:32,650 --> 00:07:36,700
We put the AS numbers directly
on the peers statement.

140
00:07:36,700 --> 00:07:38,970
We don't go into a
subconfiguration mode.

141
00:07:38,970 --> 00:07:41,220
It'll just tell us it's
an incomplete command

142
00:07:41,220 --> 00:07:42,630
if we try to hit Enter.

143
00:07:42,630 --> 00:07:44,920
So we have to put
them on the same line.

144
00:07:44,920 --> 00:07:48,120
In this case, it's 65001.

145
00:07:48,120 --> 00:07:50,910
If it was going to peer
with more than one,

146
00:07:50,910 --> 00:07:53,070
you add them to the same line.

147
00:07:53,070 --> 00:07:55,260
If we hit a space, then
we hit question mark.

148
00:07:55,260 --> 00:07:58,720
Notice, it's willing to
take another as number.

149
00:07:58,720 --> 00:08:01,740
So if we had more than
one confederation peer,

150
00:08:01,740 --> 00:08:04,540
we would simply add
them on this same line.

151
00:08:04,540 --> 00:08:07,350
In this case, of course,
we just have the one,

152
00:08:07,350 --> 00:08:09,540
and then we just have to
configure our neighbor

153
00:08:09,540 --> 00:08:15,360
50.0.167.1, which is Router 1.

154
00:08:15,360 --> 00:08:18,570
And, of course, that's
in remote AS 65001.

155
00:08:18,570 --> 00:08:22,355
That's why we configured
that as a confederation peer.

156
00:08:22,355 --> 00:08:24,960
We'll exit out of
configuration mode,

157
00:08:24,960 --> 00:08:29,140
and that neighborship should
come up here in just a moment.

158
00:08:29,140 --> 00:08:31,770
So now that our BGP
neighborship is up,

159
00:08:31,770 --> 00:08:34,559
let's do a Show BGP Summary.

160
00:08:34,559 --> 00:08:38,159
So we see that that connection
to Router 1 is, in fact, up.

161
00:08:38,159 --> 00:08:42,210
It's been up for 16 seconds,
but more interestingly,

162
00:08:42,210 --> 00:08:48,690
let's actually do a Show BGP
Neighbor for the 50.0.167.1.

163
00:08:48,690 --> 00:08:52,710
So let's look at the details
of that neighborship,

164
00:08:52,710 --> 00:08:55,660
and a couple of things we
want to take note of here.

165
00:08:55,660 --> 00:09:01,000
The first is that this is still
listed as an external link.

166
00:09:01,000 --> 00:09:05,010
So even though it's
a confederation peer,

167
00:09:05,010 --> 00:09:07,080
it is still, to
a certain extent,

168
00:09:07,080 --> 00:09:11,610
run as an eBGP connection
for certain things

169
00:09:11,610 --> 00:09:13,570
like the connection itself.

170
00:09:13,570 --> 00:09:16,140
In other words, the
default TTL is one

171
00:09:16,140 --> 00:09:19,630
and it does a connected
check, that sort of thing.

172
00:09:19,630 --> 00:09:23,670
So, to a large extent, it is
still run as an external link.

173
00:09:23,670 --> 00:09:26,820
Also note that it's saying
that the neighbor is

174
00:09:26,820 --> 00:09:29,490
under common administration.

175
00:09:29,490 --> 00:09:34,050
That's your key right there that
this is a confederation peer.

176
00:09:34,050 --> 00:09:36,700
So that's the main
thing we're looking for.

177
00:09:36,700 --> 00:09:39,990
So now let's go ahead
and do Router 7.

178
00:09:39,990 --> 00:09:43,560
Very similar configuration
except that this one

179
00:09:43,560 --> 00:09:45,660
is pairing with Router 3.

180
00:09:45,660 --> 00:09:48,900
So we'll go ahead and
configure our BGP confederation

181
00:09:48,900 --> 00:09:52,650
identifier and our
confederation peer.

182
00:09:52,650 --> 00:09:55,230
And as I'm typing
those two commands,

183
00:09:55,230 --> 00:09:58,770
I'm realizing I don't think
I put the confederation

184
00:09:58,770 --> 00:10:01,500
identifier on Router 6.

185
00:10:01,500 --> 00:10:03,360
Let's go check.

186
00:10:03,360 --> 00:10:05,860
That's actually pretty far
back in our scroll back buffer,

187
00:10:05,860 --> 00:10:08,910
so let's just do a
Show Run Section BGP,

188
00:10:08,910 --> 00:10:11,760
and we can see here
that, in fact, I did not

189
00:10:11,760 --> 00:10:13,650
set the confederation ID.

190
00:10:13,650 --> 00:10:16,480
So that would
definitely be a problem.

191
00:10:16,480 --> 00:10:18,700
Let's go ahead and do that.

192
00:10:18,700 --> 00:10:19,510
And there we go.

193
00:10:19,510 --> 00:10:21,070
Now it's configured.

194
00:10:21,070 --> 00:10:24,060
So now let's go back
and finish Router 7.

195
00:10:24,060 --> 00:10:25,920
Sometimes configuring
one router will

196
00:10:25,920 --> 00:10:27,570
help you remember
that you forgot

197
00:10:27,570 --> 00:10:29,260
to do something on another.

198
00:10:29,260 --> 00:10:32,460
So now we do have our
configuration ID and our peer

199
00:10:32,460 --> 00:10:33,700
set.

200
00:10:33,700 --> 00:10:35,880
So now we're ready to
configure our neighbor, which

201
00:10:35,880 --> 00:10:44,490
is 50.1.37.3, and again,
its remote AS is 65001.

202
00:10:44,490 --> 00:10:48,090
We'll exit configuration, and
once again, that neighborship

203
00:10:48,090 --> 00:10:49,480
should come up.

204
00:10:49,480 --> 00:10:52,570
So let's do our
Show BGP Summary.

205
00:10:52,570 --> 00:10:55,290
We see that that
neighbor is up, and if we

206
00:10:55,290 --> 00:10:59,640
do a Show BGP for
Neighbor 50.1.37.3,

207
00:10:59,640 --> 00:11:01,800
we see that once again
it's an external link

208
00:11:01,800 --> 00:11:05,100
and the neighbor is under
common administration.

209
00:11:05,100 --> 00:11:08,610
So everything looks
good here on Router 7.

210
00:11:08,610 --> 00:11:13,020
Let's take a look at this same
command, by the way, on iOS XR.

211
00:11:13,020 --> 00:11:14,710
It's pretty much
the same output,

212
00:11:14,710 --> 00:11:16,922
but let's just take a look
at it so we've seen it.

213
00:11:16,922 --> 00:11:18,630
We'll just look at
Router 3 since we just

214
00:11:18,630 --> 00:11:20,670
configured Router 7.

215
00:11:20,670 --> 00:11:25,860
So here we'll do the Show BGP
for neighbor 50.1.37.7, which

216
00:11:25,860 --> 00:11:30,360
is Router 7, and as we see
here, it again lists it

217
00:11:30,360 --> 00:11:33,600
as an external link, and
we see that same statement

218
00:11:33,600 --> 00:11:36,480
that the neighbor is under
common administration.

219
00:11:36,480 --> 00:11:40,560
So iOS XR is listing
this the same way.

220
00:11:40,560 --> 00:11:42,080
So now that our
two neighborships

221
00:11:42,080 --> 00:11:47,990
are up between routers
6 and 1 and 7 and 3

222
00:11:47,990 --> 00:11:54,050
between AS 65001 and
65002, our final step

223
00:11:54,050 --> 00:12:00,200
here is going to be to configure
Router 9 and get AS 65003 up

224
00:12:00,200 --> 00:12:04,460
and running with neighborships
to both Router 1 and Router 2.

225
00:12:04,460 --> 00:12:08,590
So let's jump over to the
command line on Router 9 next.

226
00:12:08,590 --> 00:12:12,850
So we start this up as AS 65003.

227
00:12:12,850 --> 00:12:15,970
Now, this is the first
we've configured Router 9,

228
00:12:15,970 --> 00:12:19,360
so we're going to go ahead
and set its router ID as well.

229
00:12:19,360 --> 00:12:21,130
Set the confederation ID.

230
00:12:21,130 --> 00:12:23,080
We'd better do that
first since we can

231
00:12:23,080 --> 00:12:25,330
see I'm prone to forget that.

232
00:12:25,330 --> 00:12:27,310
Confederation peers.

233
00:12:27,310 --> 00:12:31,480
And again, this one only
has to pair with 65001.

234
00:12:31,480 --> 00:12:33,050
Then we'll set up our neighbors.

235
00:12:33,050 --> 00:12:36,430
So it's 50.1.19.1.

236
00:12:36,430 --> 00:12:38,650
That's Router 1's connection.

237
00:12:38,650 --> 00:12:47,470
It's in Remote AS 65001, and
we have Neighbor 50.1.29.2 also

238
00:12:47,470 --> 00:12:49,900
in 65001.

239
00:12:49,900 --> 00:12:52,060
We'll exit Configuration.

240
00:12:52,060 --> 00:12:56,230
We can see Router 2 came up
already and there's Router 1.

241
00:12:56,230 --> 00:12:58,400
We do our Show BGP Summary.

242
00:12:58,400 --> 00:13:02,350
We can see both of those have
been up for 9 and 11 seconds

243
00:13:02,350 --> 00:13:04,240
respectively.

244
00:13:04,240 --> 00:13:06,500
I don't think we need to
look at both of these here,

245
00:13:06,500 --> 00:13:08,380
but if we do a Show BGP
Neighbor and we just

246
00:13:08,380 --> 00:13:13,570
pick on one of them, 50.1.19.1,
just look at Router 1,

247
00:13:13,570 --> 00:13:15,940
we can again see
it's an external link

248
00:13:15,940 --> 00:13:18,970
and it's under our
common administration.

249
00:13:18,970 --> 00:13:22,450
So we know that it's configured
as a confederation peer

250
00:13:22,450 --> 00:13:25,960
and the neighborship is up.

251
00:13:25,960 --> 00:13:29,310
So in this video, we
configured our neighborships

252
00:13:29,310 --> 00:13:32,910
for the connections
between our different ASes

253
00:13:32,910 --> 00:13:35,250
inside of our confederation.

254
00:13:35,250 --> 00:13:38,130
The big things to
remember here is

255
00:13:38,130 --> 00:13:41,040
we had to set the
confederation identifier,

256
00:13:41,040 --> 00:13:43,260
clearly something
I need to remember,

257
00:13:43,260 --> 00:13:45,840
and we had to set
the confederation

258
00:13:45,840 --> 00:13:48,720
peers so that the
routers would know,

259
00:13:48,720 --> 00:13:52,440
yes, it's an eBGP
connection sort of,

260
00:13:52,440 --> 00:13:55,650
but it's between
confederation friends

261
00:13:55,650 --> 00:13:59,340
so we run it just a little
bit differently with respect

262
00:13:59,340 --> 00:14:02,730
to things like AS path and
passing local preference

263
00:14:02,730 --> 00:14:04,420
and things like that.

264
00:14:04,420 --> 00:14:07,780
So we got these confederation
peers up and running.

265
00:14:07,780 --> 00:14:11,650
Of course, now we have to
bring in our external neighbors

266
00:14:11,650 --> 00:14:15,240
and bring some networks
into our BGP environment,

267
00:14:15,240 --> 00:14:18,610
and that's exactly what we're
going to do in the next video.

268
00:14:18,610 --> 00:14:20,470
So I'll see you there.

269
00:14:20,470 --> 00:14:22,560
I hope this has been
informative for you

270
00:14:22,560 --> 00:14:25,640
and I'd like to thank
you for viewing.

271
00:14:25,640 --> 00:14:29,000