LAB - BGP Route Reflector Loop

R3#trace 150.1.10.10 source loopback0 ttl 1 10

Type escape sequence to abort.

Tracing the route to 150.1.10.10

VRF info: (vrf in name/id, vrf out name/id)

  1 155.1.34.4 2 msec 2 msec 2 msec

  2 155.1.34.3 1 msec 2 msec 2 msec

  3 155.1.34.4 3 msec 3 msec 3 msec

  4 155.1.34.3 3 msec 2 msec 4 msec

  5 155.1.34.4 6 msec 3 msec 5 msec

  6 155.1.34.3 4 msec 3 msec 3 msec

  7 155.1.34.4 4 msec 5 msec 4 msec

  8 155.1.34.3 5 msec 5 msec 6 msec

  9 155.1.34.4 7 msec 6 msec 4 msec

 10 155.1.34.3 3 msec 6 msec 7 msec

1) Explain why it is happening

2) Fix it.  No tunnels or static routes allowed

3) Explain your fix

This lab uses R1-R4 and R10 from the INE topology

Link: INE-CCIE-RSv5-Topologies.zip
Description: Contains 10-Router + 4-Switch and 20-Router + 4-Switch INE ATC topology for IOL, IOSv, and CSR1000v

# R1
hostname R1
int l0
ip add 150.1.1.1 255.255.255.255
!
int g1.13
encap dot 13
ip add 155.1.13.1 255.255.255.0
int g1.101
encap dot 101
ip add 155.1.101.1 255.255.255.0
!
router eigrp 100
network 0.0.0.0
!
router bgp 100
bgp router-id 150.1.1.1
network 150.1.1.1 mask 255.255.255.255
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0
neighbor 150.1.4.4 remote-as 100
neighbor 150.1.4.4 update-source Loopback0
neighbor 150.1.4.4 route-reflector-client
neighbor 155.1.101.10 remote-as 10


# R2
hostname R2
int l0
ip add 150.1.2.2 255.255.255.255
!
int g1.24
encap dot 24
ip add 155.1.24.2 255.255.255.0
!
int g1.102
encap dot 102
ip add 155.1.102.2 255.255.255.0
!
router eigrp 100
network 0.0.0.0
!
router bgp 100
bgp router-id 150.1.2.2
bgp log-neighbor-changes
network 150.1.2.2 mask 255.255.255.255
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0
neighbor 150.1.3.3 remote-as 100
neighbor 150.1.3.3 update-source Loopback0
neighbor 150.1.3.3 route-reflector-client
neighbor 155.1.102.10 remote-as 10

# R3
hostname R3
int l0
ip add 150.1.3.3 255.255.255.255
!
int g1.34
encap dot 34
ip add 155.1.34.3 255.255.255.0
int g1.13
encap dot 13
ip add 155.1.13.3 255.255.255.0
!
router eigrp 100
network 0.0.0.0
!
router bgp 100
bgp router-id 150.1.3.3
bgp log-neighbor-changes
network 150.1.3.3 mask 255.255.255.255
neighbor 150.1.2.2 remote-as 100
neighbor 150.1.2.2 update-source Loopback0


# R4
hostname R4
int l0
ip add 150.1.4.4 255.255.255.255
!
int g1.34
encap dot 34
ip add 155.1.34.4 255.255.255.0
int g1.24
encap dot 24
ip add 155.1.24.4 255.255.255.0
!
router eigrp 100
network 0.0.0.0
!
router bgp 100
bgp router-id 150.1.4.4
network 150.1.4.4 mask 255.255.255.255
neighbor 150.1.1.1 remote-as 100
neighbor 150.1.1.1 update-source Loopback0


# R10
hostname R5
int l0
ip add 150.1.10.10 255.255.255.255
!
int g1.101
encap dot 101
ip add 155.1.101.10 255.255.255.0
int g1.102
encap dot 102
ip add 155.1.102.10 255.255.255.0
!
router bgp 10
bgp router-id 150.1.10.10
bgp log-neighbor-changes
network 150.1.10.10 mask 255.255.255.255
neighbor 155.1.101.1 remote-as 100
neighbor 155.1.102.2 remote-as 100

Solution
1) Explain why it is happening
R1 and R2 are the route reflectors, and both routers are going to choose the directly connected External route as the "best path". They pass this information on to routers 4 and 3, respectively. Now each of these routers sees the best path as being through their own Route reflector, but they must forward to each other to get there. This causes the packets to "bounce back and forth" forever.

2) Fix it (no tunnels/static routes)
On all interfaces facing other routers in AS 100: "mpls ip"
That's it!

3) Explain your fix
After MPLS has been enabled, R3 and R4 will use the labels to label-switch to the next hop instead of looking up the destination in their respective RIBs. This causes a tunnel-like effect, since R3 and R4 will only look at the labels as the packet passes through them.

MPLS/L3VPN Lab

I wanted a little more for L3VPN practice so I figured I would make my own topology compatible with the INE topology (easier to switch to it).

I made this lab based on the INE topology that I made available here: https://nickccieprogress.blogspot.com/2019/01/method-post-using-eve-ng-for-ine-atc.html

It uses 15 routers.  You can find/replace to change them for the IOS version you are using (topologies are for IOL/IOSv/CSRv).  

Link: INE-CCIE-RSv5-Topologies.zip
Description: Contains 10-Router + 4-Switch and 20-Router + 4-Switch INE ATC topology for IOL, IOSv, and CSR1000v


Link: L3VPN Configurations
Description: Contains some basic configs for the above lab - nothing fancy but it'll get things started