Border Gateway Protocol (BGP)

BGP is a dynamic routing protocol for routing traffic between different autonomous systems (AS) on the internet. BGP exchanges full routing information when a peer connection is first established and only sends updates for routes that have changed. BGP is highly scalable and can adapt to changes in the network topology, making it suitable for large, complex networks.

For medium to large networks, BGP is a better routing solution than static routing, which is simpler and requires less overhead than BGP but lacks the scalability and adaptability of BGP. With static routing, routes are fixed and do not change unless manually updated by a network administrator.

BGP Policy

BGP import and export policies are sets of rules and configurations that control the selection, advertisement, and acceptance of routing information between BGP peers.

BGP import policy is used for the routes imported from the external BGP peers and BGP export policy is used for the routes exported to the external BGP peers.

  • Default import and export policies are predefined and not configurable.​ The default policy is a template containing rules.

  • If you use both default import and export policies, these routes are not advertised to the external peer.

    • Externally learned routes

    • Default route

    • Internal endpoint IP addresses

To view the default import or export policies, navigate to the Fabrics page. In the Attachments area, choose BGP > Import policies or BGP > Export policies.

Default import policy

Default Import Policy

Match

Set

Action

All

Community

64511:99

Permit

Default export Policy

Default Export Policy

Match

Set

Action

Community

64511:99

-

Deny

Route tag

Black

-

Deny

IPv4 Prefix

0.0.0.0/0 (Exact)

-

Deny

IPv6 Prefix

::/0 (Exact)

-

Deny

Community

64510:*

-

Permit

IPv4 Prefix

0.0.0.0/0 (Exact or longer) 32

-

Deny

IPv6 Prefix

::/0 (Exact or longer) 128

-

Deny

All

All conditions are matched

-

Permit

  • When you add a static route, the Discard option in the Add Static Route page, matches Match Route tag Black, Deny rule in the default export policy. See Add a static route.

  • The rule Community: 64510:* is used to advertise one or more static routes to an external network.

  • In the default export policy, these rules are used to prevent advertising the default route and internal endpoint IP addresses (host routes) to the external network.​

    • Match 0.0.0.0/0 (Exact), Deny

    • Match ::/0 (Exact), Deny

    • Match 0.0.0.0/0 (Exact or longer) 32, Deny

    • Match ::/0 (Exact or longer) 128, Deny

  • Because the route imported from the external BGP peer has the rule Community: 64511:99 set by the default import policy, the route is not exported to a BGP peer because of the Deny rule in the default export policy.

Guidelines

  • For BGP peers that support both IPv4 and IPv6, you must create a separate BGP peer configuration for each address family.

  • BGP peering requires a routed interface or routed sub-interface. An SVI cannot be used.

  • When configuring a BGP peer, your selection of available interfaces in the VRF depends on your chosen time to live (TTL) value.

    • With TTL set to 1, you are presented with only the IP interface that is in the same subnet as the BGP peer.

    • With TTL set to greater than 1, you are shown only the routed or routed sub-interface IP interfaces in the VRF.

Create a BGP peer

Create a BGP peer, also known as a BGP neighbor, to establish a BGP session with another switch to exchange routing information. Follow these steps to create a BGP peer.

Step 1

Choose Fabrics.

Step 2

On the Fabrics page, click the fabric you want to configure.

Step 3

In the Logical Networks area, click Route tables (VRF).

Step 4

In the All route tables (VRFs), click the route table name where you will add a BGP peer.

Step 5

In the Configurations area, click BGP peers.

If BGP peers have already been created in this VRF, a list of existing peers is displayed.

Step 6

In the BGP peers area, click the pencil icon and enter the VRF Local AS. Click Save.

By default, the VRF Local AS will be used in the BGP peer unless a new value is provided in the Local AS override. See 8.e.

Step 7

Click Create BGP peer.

Step 8

Complete the following fields for Create BGP peer.

  1. Enter a name for the new BGP peer.

  2. Enter an IP address for the peer.

    For IPv4 BGP route exchange, enter an IPv4 address.

    For IPv6 BGP route exchange, enter an IPv6 address.

     Note

    For BGP peers that support both IPv4 and IPv6, you must create a separate BGP peer configuration for each address family.

  3. Select the BGP type.

  4. Enter the autonomous system (AS) number of the peer.

  5. (Optional) Enter the Local AS override number.

    Entering an override local AS number allows a switch to replace the AS number of the originating switch with the AS number of the sending BGP switch, preventing the receiving switch from dropping packets from an originator with the same AS as the receiver. By default, the VRF Local AS will be used unless a new value is provided.

  6. For eBGP, select single-hop or multi-hop

  7. Enter the time to live (TTL) in number of hops for a peering session.

    As a security check, BGP will establish or maintain a session only if the TTL value in the received IP packet header is equal to or greater than the TTL value configured here for the peering session.

  8. Select an interface from the list.

  9. Select an Import policy and an Export policy from the drop-down list or keep the defaults.

    These policies are defined in Create a BGP import policy and Create a BGP export policy.

  10. (Optional) Select an Authentication method and enter the credentials.

Step 9

Select an available interface.

In the case of a local BGP peer, the available interfaces based on peer address are displayed.

Step 10

Click Save.

View BGP peer details

Follow these steps to view BGP peer details.

Step 1

Choose Fabrics.

Step 2

On the Fabrics page, click the fabric you want to configure.

Step 3

In the Attachments area, choose BGP > BGP peers.

  1. In the BGP peers table, click the peer name.

  2. Click Peer details to view peer details.

  3. Click Received routes to view route information.

Step 4

You can also access the BGP peer details from the VRF page. In the Logical Networks area, click Route tables (VRF).

  1. In the All route tables (VRFs), click the route table name.

  2. In the Configurations area, click BGP peers.

  3. In the BGP peers table, click the peer name.

  4. Click Peer details to view peer details.

  5. Click Received routes to view route information.

Create a BGP import policy

Follow these steps to create a BGP import policy.

Step 1

Choose Fabrics.

Step 2

On the Fabrics page, click the fabric you want to configure.

Step 3

In the Attachments area, choose BGP > Import policies.

A list of BGP import policies appears. If no policies have been added, the list contains only the Default import policy.

Step 4

Click + New Policy.

Step 5

Follow these substeps to create a BGP import policy.

  1. Enter a name and description for the new BGP import policy.

  2. Optionally, you can add labels for the BGP import policy. To add a label, click + Add, enter the text and press Enter.

  3. In the Annotations area, click + Add and enter the key value pair to add annotations.

  4. In the Import policy rules area, click + Add rule to add a rule. You can add up to 10 rules.

  5. In the Order column, use the arrow key to assign an order to the rules in the policy.

  6. Select a match for the rule.

    Available types are:

    • IPv4 — Provide IPv4 prefixes, match conditions, and route origins.

    • IPv6 — Provide IPv6 prefixes, match conditions, and route origins.

    • Community — Provide community numbers. Wildcards are supported.

    • Route-tag — Provide route tags.

  7. Select a Set option from the drop-down list.

  8. Select an Action ( permit or deny) to be taken for packets that match the rule from the drop-down list.

  9. Click () to add match values for each rule. Up to 5 comma-separated values are supported for each rule (except route tags).

  10. Click Add.

Create a BGP export policy

Follow these steps to create a BGP export policy.

Step 1

Choose Fabrics.

Step 2

On the Fabrics page, click the fabric you want to configure.

Step 3

In the Attachments area, choose BGP > Export policies.

A list of BGP export policies appears. If no policies have been added, the list contains only the Default export policy.

Step 4

Click + New Policy.

Step 5

Follow these substeps to create a BGP export policy.

  1. Enter a name and description for the new BGP export policy.

  2. Optionally, you can add labels for the BGP export policy. To add a label, click + Add, enter the text and press Enter.

  3. In the Annotations area, click + Add and enter the key value pair to add annotations.

  4. In the Export policy rules area, click + Add rule to add a rule. You can add up to 10 rules.

  5. In the Order column, use the arrow key to assign an order to the rule.

  6. Select a match for the rule.

    Available types are:

    • Community — Provide community numbers. Wildcards are supported.

    • IPv4 — Provide IPv4 prefixes, match conditions, and route origins.

    • IPv6 — Provide IPv6 prefixes, match conditions, and route origins.

    • Route-tag — Provide route tags.

  7. Select a Set option from the drop-down list.

    Available types are:

    • AS path pad — Provide AS path list.

    • Community — Provide community numbers.

    • Next-hop IPv4 — Provide IPv4 address of the connection between the peers.

    • Next-hop IPv6 — Provide IPv6 address of the connection between the peers.

  8. Select an Action ( permit or deny) to be taken for packets that match the rule from the drop-down list.

  9. Click () to add match values and set values for each rule. Up to 5 comma-separated values are supported for each rule (except route tags).

  10. Click Add.

Finish and commit your changes

Your changes are not applied to the fabric until you review, commit, and push them.

 Note

For a more detailed description of this procedure, see "Workflow for making changes to the fabric" in Cisco Nexus Hyperfabric—Getting Started.

Follow these steps to finish and commit your changes.

Step 1

Click Review configuration

Step 2

Verify your changes in the review list.

Step 3

Click Comment and push.

Step 4

In the Comment before pushing configuration dialog box, enter the reason for the change.

Step 5

Click Push configuration.