Troubleshooting Scenario: BGP Peering Misconfiguration

What is BGP?

Border Gateway Protocol (BGP) is the core routing protocol of the global Internet. It is a standardized Path Vector Protocol designed to exchange routing and reachability information among Autonomous Systems (AS) across the world. Unlike Interior Gateway Protocols (IGPs like OSPF or EIGRP), BGP scales across millions of routes and makes routing decisions based on network policies, path attributes, and rule sets rather than technical metrics like hop count or bandwidth.

Types of BGP

• eBGP (External BGP): Used to exchange routing information between routers located in different Autonomous Systems (e.g., between an Enterprise network and an ISP).
• iBGP (Internal BGP): Used to exchange routing information between routers within the same Autonomous System to maintain consistent routing path state across core networks.

BGP Peer States

• Idle: BGP process initialized; waiting to start TCP connection.
• Connect: Waiting for TCP 3-way handshake on TCP port 179 to complete.
• Active: Failed to establish TCP connection; actively re-attempting connection establishment.
• OpenSent: TCP connected; BGP OPEN message sent to remote neighbor.
• OpenConfirm: OPEN message received; awaiting KEEPALIVE confirmation.
• Established: Neighbor peering session fully active; routes actively exchanged via UPDATE messages.

BGP Path Attributes

• Weight (Cisco Specific): Local router preference; higher values preferred (0 to 65,535).
• Local Preference: Preferred path within an AS; highest value wins (Default: 100).
• Originate: Routes originated locally on the router are preferred.
• AS-Path Length: Shortest path based on the count of traversed Autonomous Systems.
• Origin Type: Path origin precedence (IGP > EGP > Incomplete/Redistributed).
• MED (Multi-Exit Discriminator): Suggests entry paths to external neighbors; lower values preferred.

BGP Security Mechanisms

• MD5 Password Authentication: Protects BGP TCP sessions against unauthorized neighbor spoofing and injection.
• GTSM (Generalized TTL Security Mechanism): Uses IP TTL values to stop remote BGP session hijacking attempts.
• RPKI (Resource Public Key Infrastructure): Cryptographically verifies origin AS ownership to eliminate BGP Route Hijacking and IP prefix leaks.
• Prefix Filtering & Route Maps: Prevents rogue route advertisements by restricting inbound and outbound prefix limits.

Where to Use BGP?

• ISP Interconnections & Internet Backbone: Connecting Tier-1, Tier-2, and regional Service Providers to maintain global Internet connectivity.
• Multi-Homed Enterprise Networks: Organizations connected to two or more independent ISPs for redundant Internet uplinks and failover capabilities.
• Large Data Centers & Cloud Providers: AWS, Azure, Google Cloud, and enterprise data centers using BGP EVPN for scalable overlay network architectures.