BGP
Service Gateway routers run BGP with the Netgraph platform inside their tunnel, so the platform learns which guest networks sit behind which router.
Each Service Gateway router can run BGP with the Netgraph platform, inside its tunnel to Netgraph. The router advertises its connected networks, which include the guest networks. The platform then knows which guest networks sit behind which router, and sends traffic for those guests back through the right tunnel.
BGP runs between the router and the platform only. It does not peer with the rest of your network.
BGP Configuration
Section titled “BGP Configuration”The BGP tab holds the settings for the whole Context:
- Enable BGP: turns BGP on or off for the Context. It is on by default.
- Cloud BGP AS: the platform’s AS number.
- Service Gateway BGP AS: the routers’ AS number.
Both AS numbers are 65000 by default. Click Update Configuration to
save. The router configuration picks the numbers up as ${bgpRemoteAs}
(the platform’s AS) and ${bgpLocalAs} (the router’s own AS), so
download the configuration again and apply it on the routers after a
change.
BGP peers
Section titled “BGP peers”The BGP Peers list shows one peer per router that runs BGP, by its tunnel interface IP. Sign In adds the peer when you add a router with BGP enabled, or switch BGP on for it, and removes it when you switch BGP off or remove the router. There is nothing to add here by hand.
BGP per router
Section titled “BGP per router”When BGP is enabled for the Context, a router you add gets BGP as well. In a Batch Add file, the fourth column decides. You can switch BGP off for one router with the BGP Enabled switch on the router’s page.
For a router without BGP, Sign In adds the networks of the router’s DHCP scopes to its IPsec remote peer instead, so the platform still reaches the guests. A router without an IPsec remote peer must keep BGP enabled.
Verify
Section titled “Verify”On the router, show bgp vpnv4 unicast all summary shows the session
with the platform and the number of prefixes. The session runs in the
Context’s VRF on the router.
Route advertisement
Section titled “Route advertisement”The router advertises its connected networks. There are no route policies to set in Sign In.