Multi-vendor troubleshooting lab 2 of 12
BGP between vendors with differing defaults
Larkfield's four sites run eBGP in a ring, and every session hides a default that one vendor has and the others don't: address families that vanish when you configure one, routes that are never exported, communities that are stripped, and a policy chain that silently rejects the rest.
Run this lab
It needs Lite: its 5 nodes are set to 6 vCPU and 7,424 MB in total. That fits the free demo too.
In your workspace: Shared, then Multi-vendor interoperability and troubleshooting guided labs, then 02 - BGP between vendors with differing defaults
- Level
- Intermediate
- Time
- About 75 minutes
- Nodes need
- 6 vCPU, 7,424 MB
- Smallest plan
- Lite
The scenario
Larkfield is replacing OSPF between its sites with eBGP, one private AS per site. Goole's traffic to Hull should go through the data centre, not Leeds, because that path has the bigger circuit. Hull's SRX tags its routes with community 65020:200 to say so, and the MikroTik at Goole gives routes with that tag a local preference of 200 when they arrive from the data centre.
Nobody can say why half the sessions carry nothing. Each session in the ring hides a default that exists on one vendor only.
| Device | AS | Interface | Address | Peer |
|---|---|---|---|---|
| R1 | 65010 | Gi0/0 | 10.0.12.1/30 | SRX1 |
| R1 | 65010 | Gi0/1 | 10.0.41.1/30 | CHR1 |
| R1 | 65010 | Loopback0 | 10.255.0.1/32 | Advertised |
| SRX1 | 65020 | ge-0/0/0.0 | 10.0.12.2/30 | R1 |
| SRX1 | 65020 | ge-0/0/1.0 | 10.0.23.1/30 | EOS1 |
| SRX1 | 65020 | lo0.0 | 10.255.0.2/32, 10.20.0.1/24 | Both advertised, with community 65020:200 |
| EOS1 | 65030 | Ethernet1 | 10.0.23.2/30 | SRX1 |
| EOS1 | 65030 | Ethernet2 | 10.0.34.1/30 | CHR1 |
| EOS1 | 65030 | Loopback0 | 10.255.0.3/32 | Advertised |
| CHR1 | 65040 | ether1 | 10.0.34.2/30 | EOS1 |
| CHR1 | 65040 | ether2 | 10.0.41.2/30 | R1 |
| CHR1 | 65040 | ether3 | 10.40.0.1/24 | Goole LAN, advertised |
| CHR1 | 65040 | loopback | 10.255.0.4/32 | Advertised |
| H1 | eth0 | 10.40.0.10/24 | Gateway 10.40.0.1 |
What you’ll practise
- Read BGP session state and capabilities on IOS, Junos, EOS and RouterOS
- Fix a session where Junos stopped negotiating IPv4 because another family was configured
- Explain what each vendor advertises by default, and write a Junos export policy
- Find which vendors send communities by default and turn it on where needed
- Explain the default end of a RouterOS filter chain and repair a chain
- Prove a design that depends on a community, end to end
The tasks
- Give H1 its address
- Read every session
- SRX1 to R1, the family that vanished
- SRX1 to EOS1, nothing to export
- EOS1 to CHR1, the missing community
- CHR1 to R1, the end of the chain
- Prove the design
The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.
Topology and devices
The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.
Every link, as text
- R1
Gi0/0to SRX1ge-0/0/0 - SRX1
ge-0/0/1to EOS1Ethernet1 - EOS1
Ethernet2to CHR1ether1 - CHR1
ether2to R1Gi0/1 - CHR1
ether3to H1eth0
| Node | Device | Image in Add Node | Set to |
|---|---|---|---|
| R1 | Cisco IOSv | vios-adventerprisek9-m.spa.159-3.m9 | 1 vCPU, 512 MB |
| SRX1 | Juniper vSRX NextGen template | vsrxng-23.4R2-S3.9 | 2 vCPU, 4,096 MB |
| EOS1 | Arista vEOS | veos-4.33.1.1F | 1 vCPU, 2,048 MB |
| CHR1 | MikroTik RouterOS | mikrotik-7.14.2 | 1 vCPU, 256 MB |
| H1 | Alpine Linux | clbalpinebase-alpine-base-3-20-3 | 1 vCPU, 512 MB |
How to open this lab
Sign in to your workspace at
lab.cloudlabbox.com.In File Manager, open Shared, then the folder
Multi-vendor interoperability and troubleshooting guided labs.Open
02 - BGP between vendors with differing defaultsand start its nodes, then open Lab Tasks for the scenario and the steps.
The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.
More Multi-vendor troubleshooting labs
All Multi-vendor troubleshooting labs
Related labs in other courses
CloudLabBox is independent of Arista Networks, Cisco, CompTIA, Fortinet, HPE, Juniper Networks and MikroTik. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.