In further continuation to our discussion on BGP related terms and methodologies, in this post we will discuss the use of BGP backdoor approach and corresponding configuration on BGP speakers.
What is BGP Backdoor?
BGP Backdoor is a well-known feature of BGP to alter the administrative distance of external Border Gateway Protocol (eBGP) to give precedence to an internal gateway routing protocol (IGP) over an eBGP route. By default, external BGP (eBGP) is assigned an administrative distance of 20.
Administrative distance is the foremost criterion which a router considers when it has to choose between two routing protocols that provide route information for the same destination. This administrative distance is a scale which indicates how reliable and trustworthy the source of the route information is. A lower administrative distance value reflects that the protocol/link is more dependable.
The “Backdoor Feature” can be used to up the administrative distance of eBGP to 200 to make sure that IGP learned routes are given priority. This feature means that a backdoor network will be treated like a local one, however, it will not be advertised. This can be done by using the network BGP backdoor command.
Topology to Understand BGP Backdoor
As per topology we have three routers R1, R2 & R3 having IGP/BGP configured in following fashion –
R1 <-> R2 OSPF
R2 <-> R3 EBGP
R1 <-> R3 EBGP
Both R1 and R3 receive the route R2 loopback (22.214.171.124) from Router R2 through OSPF and eBGP respectively.R1 and R3 further have an EBGP neighborship and hence R1 will receive the route of 126.96.36.199 from R3 via eBGP. Now R1 has two routes for 188.8.131.52, one from R2 via OSPF and another from R3 via eBGP.
Since the eBGP learnt route AD is 20 and OSPF being 110, eBGP route via R3 is the preferred one and installed in the routing table. However, considering shortest path we won’t prefer to reach to 184.108.40.206 via path R1 > R3 >R2 since we have less hop path i.e. R1>R2.
In order to achieve this there have 2 two options:
1: Change the eBGP AD value to a value larger than AD 110 of OSPF
2: Use the BGP backdoor command.
Option 1 of changing the AD value is less recommended hence most commonly used method to achieve this required output is Option 2 i.e. to use of BGP backdoor command.
Now lets us take a look at the working and configurations of our topology:
Checking route of R2s loopback on R1 without BGP backdoor.
After the BGP backdoor is configured on R1 as follows:
Verifying the route for 220.127.116.11 now on R1: