BGP in depth lab 7 of 14

Multihoming and traffic engineering

Tern Logistics connects to two ISPs and wants its web traffic in through one and its staff traffic in through the other. Control what goes out with local preference, then find out how far prepending and MED really get you on the way in, and why a provider's community is sometimes the only tool that works.

Run this lab

It needs Lite: its 5 nodes are set to 5 vCPU and 2,304 MB in total. That fits the free demo too.

In your workspace: Shared, then BGP in depth guided labs, then 07 - Multihoming and traffic engineering

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Advanced
Time
About 100 minutes
Nodes need
5 vCPU, 2,304 MB
Smallest plan
Lite

The scenario

Tern Logistics (AS 64510) has an IOS router, CE1, with two links to ISP A, and a MikroTik, CE2, with one link to ISP B. The ISPs peer with each other and with a distant network. Tern's brief:

TrafficRequirement
Everything going outLeaves through ISP A, on CE1
Into the web block, 203.0.113.0/25Arrives through ISP A, on the main link
Into the staff block, 203.0.113.128/25Arrives through ISP B
Anything between ISP A and ISP BMust never cross Tern

You can only configure CE1 and CE2. The ISPs have published how they treat customers:

ISPLocal preferenceCommunity you can send
ISP A, AS 64501Customers 150, peers 10064501:80 sets your route to 80
ISP B, AS 64502Customers 150, peers 10064502:80 sets your route to 80
DeviceInterfaceAddressConnects to
CE1Loopback1203.0.113.1/25
CE1Gi0/0172.16.1.1/30ISPA Gi0/0
CE1Gi0/1172.16.2.1/30ISPA Gi0/1
CE1Gi0/210.0.12.1/30CE2 ether2
CE2ether1172.16.3.1/30ISPB Gi0/0
CE2ether210.0.12.2/30CE1 Gi0/2
CE2staff203.0.113.129/25
ISPAGi0/0172.16.1.2/30CE1 Gi0/0
ISPAGi0/1172.16.2.2/30CE1 Gi0/1
ISPAGi0/2172.16.4.1/30ISPB Gi0/1
ISPAGi0/3172.16.5.1/30REMOTE Gi0/0
ISPBGi0/0172.16.3.2/30CE2 ether1
ISPBGi0/1172.16.4.2/30ISPA Gi0/2
ISPBGi0/2172.16.6.1/30REMOTE Gi0/1
REMOTELoopback1198.51.100.1/24
REMOTEGi0/0172.16.5.2/30ISPA Gi0/3
REMOTEGi0/1172.16.6.2/30ISPB Gi0/2

What you’ll practise

  • Use local preference to choose the outbound exit, on one router, for the whole AS
  • Use MED to choose between two links to the same provider
  • Use AS-path prepending to influence distant networks, on IOS and RouterOS
  • Explain why a provider's own local preference beats any prepend you send
  • Use provider communities to change a provider's decision
  • Keep a multihomed customer from becoming a transit path

The tasks

  1. Read the baseline
  2. Outbound with local preference
  3. Two links to one provider: MED
  4. Prepending
  5. A provider community
  6. The same for the staff block
  7. Prove the paths

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of Multihoming and traffic engineering5 nodes, 7 links. Every link is listed as text below the diagram.CE1CE2ISPAISPBREMOTEGi0/0Gi0/0Gi0/1Gi0/1ether1Gi0/0Gi0/3Gi0/0Gi0/2Gi0/1Gi0/2ether2Gi0/2Gi0/1
5 nodes, with the interface names each link uses.
Nodes in Multihoming and traffic engineering, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
CE1Cisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
CE2MikroTik RouterOSmikrotik-7.14.21 vCPU, 256 MB
ISPACisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
ISPBCisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB
REMOTECisco IOSvvios-adventerprisek9-m.spa.159-3.m91 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder BGP in depth guided labs.

  3. Open 07 - Multihoming and traffic engineering and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More BGP in depth labs

All BGP in depth labs

CloudLabBox is independent of Arista Networks, Cisco, Juniper Networks and MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.