BGP to advertise /24 to 2 different ISPs

DerekSmall
Comes here often

BGP to advertise /24 to 2 different ISPs

The BGP implementation on Meraki seems to be focused on using it as a route transport for a VPN overlay.  I have a network which Meraki Internet edge devices (HA pair), which terminate a couple of PtP VPNs, but do not use AutoVPN.  Today we have a pair of ISRs that run BGP and advertise a /24 via a publicly registered ASN, to two different ISPs.  The ISRs accept full Internet BGP routing tables and thereby route traffic out over the best BGP AS-Path, and they advertise our /24 to both ISPs and thereby allow traffic to be received on either ISP.

 

The Meraki MXs are already configured to NAT several internal (DMZ) systems to the public /24, which exists between the ISR routers and the Meraki MX firewalls.

 

We are looking to get rid of the ISRs.  I understand that we will need to contact the ISPs and have them send us a default route only, and that we will need to weight each ISP's BGP neighbors so that we have a primary and a secondary.  We will also need to do a BGP AS pre-pend to the secondary ISP, to make sure that we don't receive traffic from that ISP.

 

Since the BGP implementation on Meraki seems pretty focused on usage as a VPN overlay for AutoVPN, I wanted to see if anyone has done BGP to 2 different ISPs to advertise a registered /24, or if there would be any problems expected in doing so?

 

Since Meraki MX's don't support a loopback interface, I was planning to create the /24 as a static route, to be redistributed by BGP, but I also have not found a way to do that in the BGP routing config.  Are static routes automatically redistributed by BGP? If so is there a way to use a route-map to limit what routes (prefixes) are advertised to the eBGP neighbors?

1 Reply 1
alemabrahao
Kind of a big deal
Kind of a big deal

The MX cannot operate as a compatible edge BGP router with your ISR. It only performs simplified eBGP, geared towards AutoVPN.

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
Labels