ADC virtual-server BGP RHI

Hi, I'm trying to do RHI with BGP.

I configure BGP, with peer to a router, to redistribute flagged VIP. In the virtual server I do "redistribute vip". At the router I receive the route to the VIP. If the VIP is down I still reveive the route.

I expected to do not receive the VIP route if the virtual-server is down.

So my question:

How can I do the advertise of the VIP route only when the virtual-server is UP - Route Health Injection (RHI) ?
How can I see the BGP routing table at A10? When I do "sh ip route bgp" I do not see any thing.
I'm using "Advanced Core OS (ACOS) version 4.1.0-P9, build 60" vThuner.

Thank you.

Luis.

A10 config.

active-partition BGP
!
!
vlan 100
tagged ethernet 1
router-interface ve 100
name CLI-SIDE
!
vlan 120
tagged ethernet 2
router-interface ve 120
name SERVER-SIDE
!
interface ve 100
name CLI-SIDE
ip address 10.1.3.100 255.255.255.0
!
interface ve 120
name SERVER-SIDE
ip address 10.1.2.100 255.255.255.0
!
!
health monitor TCP_22
method tcp port 22
!
slb server SRV10 10.1.2.10
disable
port 22 tcp
!
slb server SRV11 10.1.2.11
port 22 tcp
!
slb service-group SRV tcp
health-check TCP_22
member SRV10 22
member SRV11 22
!
slb virtual-server VIP 10.1.4.100
redistribution-flagged
port 22 tcp
service-group SRV
!
router bgp 14100
neighbor 10.1.3.1 remote-as 13100
redistribute connected
redistribute vip only-flagged
!
end


Tagged:

Comments

  • mdunnmdunn Member, A10ers ✭✭✭

    To withdraw the route when the VIP is DOWN, we also need to add one of these commands depending on your use-case:

    disable-when-all-ports-down
    or 
    disable-when-any-port-down


    To view the routes, "show ip route" should show the entire route table, and "show ip route bgp" should show any routes learned from BGP, but you can also try:

    show ip bgp

    show ip route database

    show ip fib

  • Hi mdunn,

    I'm using the "disable-when-all-ports-down" and works great. The router only have the route to VIP if it is UP (Functional up).

    The "show ip route bgp" seem to do nothing! The following commands are good, but I expect to see the VIP route with: "show ip route"; "show ip route database" and "show ip fib" , but not.

    A10VM02[BGP](NOLICENSE)#sh ip bgp      
    BGP table version is 758, local router ID is 10.1.3.100
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal, l - labeled
    S Stale, m multipath
    Origin codes: i - IGP, e - EGP, ? - incomplete

    Network Next Hop Metric LocPrf Weight Path
    *> 10.1.2.0/24 0.0.0.0 0 32768 ?
    *> 10.1.3.0/24 0.0.0.0 0 32768 ?
    *> 10.1.4.100/32 0.0.0.0 0 32768 ?

    Total number of prefixes 3
    A10VM02[BGP](NOLICENSE)#show ip route database
    Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
    O - OSPF, IA - OSPF inter area
    N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    E1 - OSPF external type 1, E2 - OSPF external type 2
    i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    > - selected route, * - FIB route, p - stale info

    C *> 10.1.2.0/24 is directly connected, ve 120
    C *> 10.1.3.0/24 is directly connected, ve 100
    A10VM02[BGP](NOLICENSE)#show ip fib
    Prefix Next Hop Interface Distance
    ------------------------------------------------------------------------
    10.1.2.0 /24 0.0.0.0 ve 120 0
    10.1.3.0 /24 0.0.0.0 ve 100 0
    Total Routes = 2
    A10VM02[BGP](NOLICENSE)#

    A10VM02[BGP](NOLICENSE)#sh slb virtual-server
    Total Number of Virtual Services configured: 1
    Virtual Server Name IP Current Total Request Response Peak
    Service-Group Service connection connection packets packets connection
    ----------------------------------------------------------------------------------------
    *VIP 10.1.4.100 Functional Up

    port 22 tcp 0 0 0 0 0
    SRV 22/tcp 0 0 0 0 0
    Total received conn attempts on this port: 0

    A10VM02[BGP](NOLICENSE)#sh ip route
    Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
    O - OSPF, IA - OSPF inter area
    N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    E1 - OSPF external type 1, E2 - OSPF external type 2
    i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    * - candidate default

    C 10.1.2.0/24 is directly connected, ve 120
    C 10.1.3.0/24 is directly connected, ve 100

    Thank you mdunn.

  • dquinndquinn Member, A10ers

    Hello

    You can use ""show ip bgp" as you have above or "sh ip bgp neighbors x.x.x.x advertised-routes"

    VIPs will not show up under "show ip route"

  • dquinndquinn Member, A10ers

    Also

    show ip route database works on newer versions of ACOS

    4.1.0-P9 is very old and no longer supported. Eond of support was 12/21

  • luis_f_ribeiroluis_f_ribeiro Member
    edited December 12

    Hi dquinn,

    Yes, the command show ip route database has improved. Know I'm using version 6.0.5.51.

    A10VM6BGP#sh ip route database
    Codes: K - kernel, C - connected, S - static, R - RIP, B - BGP
    O - OSPF, IA - OSPF inter area
    N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2
    E1 - OSPF external type 1, E2 - OSPF external type 2
    i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, ia - IS-IS inter area
    > - selected route, * - FIB route, p - stale info

    C *> 10.1.2.0/24 is directly connected, ve 120, 00:12:21
    C *> 10.1.3.0/24 is directly connected, ve 100, 00:12:21
    v * 10.1.4.100/32 [0/0] is directly connected, loopback 1 inactive, 00:03:37

    There are no legend for the "v". Should it be "K" ?

    A10VM6BGP#sh ip bgp neighbors 10.1.3.1 advertised-routes
    BGP table version is 19, local router ID is 10.1.3.100
    Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
    Origin codes: i - IGP, e - EGP, ? - incomplete

    Network Next Hop Metric LocPrf Weight Type Path
    *> 10.1.2.0/24 10.1.3.100 0 32768 ?
    *> 10.1.3.0/24 10.1.3.100 0 32768 ?
    *> 10.1.4.100/32 10.1.3.100 0 32768 ?

    Total number of prefixes 3

    Best Regards

    Luis.

Sign In or Register to comment.