☁️Using Route Filters with BGP on MikroTik RoSv7, let's script us some automatic failover!

แชร์
ฝัง
  • เผยแพร่เมื่อ 2 ต.ค. 2024

ความคิดเห็น • 52

  • @TheNetworkBerg
    @TheNetworkBerg  2 ปีที่แล้ว +3

    MikroTIk docs on Route Filters on RoSv7:
    help.mikrotik.com/docs/pages/viewpage.action?pageId=74678285

  • @linz7966
    @linz7966 ปีที่แล้ว +1

    Why TF did Mikrotik go ROS7 - so backwards

  • @tiaanvandermerwe1449
    @tiaanvandermerwe1449 16 วันที่ผ่านมา

    How would one announce ospf routes over bgp, example, from providers edge to provider. And ospf in routing table, i have selected redistribution=ospf, connected. Only when i add the network address on routing filter it announces? Any idea on how to overcome this.

  • @girishgadagkar3184
    @girishgadagkar3184 4 หลายเดือนก่อน

    Can you please explain how to configure iBGP configuration between ROSv7 and ROSv6
    We are planning to setup 2 eBGP routers and iBGP between them
    And downstream is OSFP.
    AS of now all working with 1 eBGP v7 and OSPF
    BUT not getting how to set filter rule between V7 and v6 iBGP router

  • @nobody_323
    @nobody_323 ปีที่แล้ว

    How set on IN filter in ROS 7: SET IN NEXTHOP DIRECT (from ROS6,pppoe interface)?

  • @Rimurishorts
    @Rimurishorts ปีที่แล้ว

    Thanks for your tutorial. how to configure load balancing and failover (we have /23 subnet and I need to configure Subnet-A /24 will go through ISP-1 and another Subnet-B /24 will go through ISP-2) if any ISP is down then the subnet will go through live ISP.

  • @emmanueloluwayemisi
    @emmanueloluwayemisi 6 หลายเดือนก่อน

    i would have love to see how the outbound filter works. because i tried it using this method. but notthing get advertised to my bgp peers

  • @BattousaiHBr
    @BattousaiHBr 2 ปีที่แล้ว +1

    this scripting format is really terrible to work from the CLI... if you have a big chain with a misconfiguration somewhere and you just need to make a small adjustment you need to either type the whole rule again or print current rule, copy/paste then navigate to the part you want.
    another issue currently is from the GUI if you try to apply an invalid configuration it will rollback the window to the last valid configuration instead of just popping an error and letting you continue where you were, like it already does in places such as the firewall when you try to use in-interface in srcnat chain.

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว +1

      I totally agree with you and really hope MikroTik spends more time with refining the filters, though something tells me this is at the bottom of their priority list :(

    • @BattousaiHBr
      @BattousaiHBr 2 ปีที่แล้ว

      @@TheNetworkBerg as far as editing via CLI is, this would be solved with the addition of a text editor mode like vim, which would probably make it easier to work with than the old routing filters since you don't need to pick the item you want to change.
      the new routing filters also desperately needs tab-completing (rumor is it's in the works).

  • @m-electronics5977
    @m-electronics5977 ปีที่แล้ว

    11:10 Hmmm... I must set to get it working a "else {reject}"🤔🤔

  • @jamesw5584
    @jamesw5584 2 ปีที่แล้ว

    I miss "ip route print where received from xxx" I've been trying to work out a simple way but can't find it yet. I wish there was a cheat sheet.

  • @XDarkstarXUnknownUnderverse
    @XDarkstarXUnknownUnderverse 2 ปีที่แล้ว

    For some reason, my 1036 does not like v7 at all. I had to ether boot a few times.

  • @Ton_DayTrader
    @Ton_DayTrader 10 หลายเดือนก่อน

    How to reject some as-path ? example 23XXX,456XX,69XX,62XXX i need to reject asn 69XX only

  • @kurtneytodman9360
    @kurtneytodman9360 2 ปีที่แล้ว +1

    Just the video I needed! Thank you

  • @Problembaer4
    @Problembaer4 ปีที่แล้ว

    Is that whole Route-Filter-thing an ISP/BGP thing? Because in my small understanding, I can Filter via Firewall-Filter, why should I filter routes? I add the routes I want, why should I do such a complicated thing?

    • @TheNetworkBerg
      @TheNetworkBerg  ปีที่แล้ว

      Yeah filtering happens more in the internetworking space either between ISPs/Cloud providers/CDNs/Internet etc, though it is still useful in our own networks to configure stuff like automatic failover using BGP

  • @sham14381
    @sham14381 2 ปีที่แล้ว

    I wonder why are you setting BGP weight and distance both? Only 1 is needed and as this is related to BGP so weight should be here to handle outgoing traffic

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว +1

      It is to showcase how multiple attributes can be changed at the same time. Here are some newer videos on BGP if you are interested in how it works.
      BGP Intro:
      th-cam.com/video/M5UypwXmIFQ/w-d-xo.html
      BGP Attributes:
      th-cam.com/video/cMNx2PSZ_6Q/w-d-xo.html

    • @sham14381
      @sham14381 2 ปีที่แล้ว

      @@TheNetworkBerg thanks much appreciated

  • @Wizerd-2024
    @Wizerd-2024 ปีที่แล้ว

    Is there a way to stop filtered routes from populating in the routing table? ie the red routes.

  • @2000sshakh
    @2000sshakh 2 ปีที่แล้ว

    hi i have link flapping problem in Mikrotik how to solve ?

  • @Roberthernandez-ll1pk
    @Roberthernandez-ll1pk 6 หลายเดือนก่อน

    Hello help me.
    I am trying to set up filtering with regex for an edge computer, the rule tries to only accept asn1 that is directly connected and only the asns that are directly connected to asn1. That is, it only accepts two autonomous systems. I had this in rosv6 so when I move it to rosv7 it doesn't work. although it is used as a legacy path.

  • @TheNetworkBerg
    @TheNetworkBerg  2 ปีที่แล้ว +1

    How do you guys feel about the rework of Route Filters on MikroTik RoSv7? Do you like the new "scripting" style configuration or do you prefer having a popup asking you to just fill in specific details? What has your experiences been on RoSv7, I would really love to hear!

    • @dechristophera
      @dechristophera 2 ปีที่แล้ว

      Do you have any tips for reliable route advertisements? I feel like the new filter-based system is clunky.

    • @robin-eveonline
      @robin-eveonline 2 ปีที่แล้ว

      script, is best and more intuitive

  • @defaultroute
    @defaultroute 2 ปีที่แล้ว +3

    Pretty cool stuff. I just tried to swap my 1100AHxx4 for a CCR1036. Caused a P1 in my house and had to roll back. The cat was very angry with 7.1.1

  • @fernal9301
    @fernal9301 2 ปีที่แล้ว +1

    thx

  • @robin-eveonline
    @robin-eveonline 2 ปีที่แล้ว

    when is there a video on the bgp confederations?
    Otherwise keep it up thx !

  • @kirksteinklauber260
    @kirksteinklauber260 2 ปีที่แล้ว +1

    Thanks for the video!!! Until I saw your videos I was struggling with getting started with BGP!. Now I have to upgrade my routers to ver 7.x.x , do a PoC and migrate my connections!

  • @rajeshbose2802
    @rajeshbose2802 2 ปีที่แล้ว +1

    Its really good. Need to see advertise routes and received routes in bgp os7. would please share it

  • @oliver1121
    @oliver1121 2 ปีที่แล้ว +1

    Awesome, this is going to be useful since I plan on upgrading a PROD CCR2004 with x2 Full BGP Tables to RouterOS v7 tonight. This CCR2004 is along my ISPs redundant path so there should be no impact to traffic, wish me luck!

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว

      Good luck! Feel free to let me and anyone else here know how it went :D!

    • @oliver1121
      @oliver1121 2 ปีที่แล้ว

      @@TheNetworkBerg Extremely late/morning for me right now and the RouterOS v7 upgrade has NOT gone well :( I can't get a simple iBGP peering from the RouterOS v7 Router RouterOS v6 Router to establish. Not sure if it is user error, but everything I have tried hasn't brought the iBGP peering online (it worked fine on RouterOS v6 RouterOS v6). Trying to get to the bottom of it late at night isn't the best so I will have a better look tomorrow.

    • @oliver1121
      @oliver1121 2 ปีที่แล้ว

      For anyone else reading this in the future, it turns out it was indeed user error. I had to make sure to set the local.address to the Loopback IP address to get it to work in the end. The RouterOS v6 -> RouterOS v7 BGP config conversion certainly needs a bit of tweaking to get going right :) I'm monitoring my RouterOS v7 Routers and will see how they go over the next few weeks/months.

  • @zipsnet
    @zipsnet 2 ปีที่แล้ว +1

    What about load balancing using PCC on ROS7.1? Would you be able to do something like that? It would be very helpful. Thanks.

  • @michaelmuraguri7342
    @michaelmuraguri7342 2 ปีที่แล้ว +1

    appreciated for this. Looking forward to bgp vpn video on version 7

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว +1

      Unfortunately BGP VPN is still not working in any of the RoSv7 builds :( In this video I'm using 7.2rc3 which is the very latest build and I can't make it work on this version either.

    • @michaelmuraguri7342
      @michaelmuraguri7342 2 ปีที่แล้ว

      @@TheNetworkBerg i thought i was missing something, been racking my brain over it.

  • @davidearly9203
    @davidearly9203 2 ปีที่แล้ว +2

    Thanks for this intro to the v7 route filters. Very helpful!

  • @lekseiagrafenin2497
    @lekseiagrafenin2497 2 ปีที่แล้ว

    Hi) Please make a new scheme on ros7 and run vpnv4)

  • @KarenYesayan-rh2sh
    @KarenYesayan-rh2sh ปีที่แล้ว

    First of all thanks for the helpful tutorial to get some idea about the new changes in RouterOS related to BGP. Can you please share the info about the software/tool you used to create the network topology?

  • @tuanha7651
    @tuanha7651 2 ปีที่แล้ว

    Hi Berg, could you exercising the toturial of wifi roaming in Mikrotik os 7

  • @sayedabdullahqasimpeters2586
    @sayedabdullahqasimpeters2586 2 ปีที่แล้ว

    Awesome video and a quick question how do I remove the rejected routes from my routing table?

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว

      Unfortunately v7 does not have any discard function so all routes will remain in memory therefore they will stay in the routing table, just marked as red. (No way to remove it :()

    • @sayedabdullahqasimpeters2586
      @sayedabdullahqasimpeters2586 2 ปีที่แล้ว

      @@TheNetworkBerg Thanks for the update. I got a work around :). I used the Input Accept NLRI option.

  • @sevenstarsofficial
    @sevenstarsofficial 2 ปีที่แล้ว

    This is a bird implementation , ipv6 bgp dosn't work anyway.

    • @TheNetworkBerg
      @TheNetworkBerg  2 ปีที่แล้ว

      A bird implementation?

    • @sevenstarsofficial
      @sevenstarsofficial 2 ปีที่แล้ว

      @@TheNetworkBerg Yes, the routing daemons are bird based, even the setup syntax is similar isn't it?
      if (net ~ [ 169.254.0.0/16+, 172.16.0.0/12+, 192.168.0.0/16+, 10.0.0.0/8+, 224.0.0.0/4+, 15.15.15.0/24+ ]) then reject;
      if net.ip = 0.0.0.0 then reject;
      if (net.len < 8) || (net.len > 32) then reject;