BGP Attributes & Route Filters, Ft. MikroTik ROSv7

[@TheNetworkBerg]

Hey guys, please use the below reference material to get the most out of watching this video. Thanks again for the great cheat sheet created by Rick Frey! One important note that I would like to leave that I forget to mention inside of the video is that when it comes to route filtering, please try and create separate in & out filters PER peer/connection. If you create just one filter that is used across many peers there will come a day that you need to make a change that will only impact the one peer but now it will affect many. It is considered best practice to setup filtering in this manner. BGP Attributes: www.ciscopress.com/articles/article.asp?p=1565538&seqNum=4 BGP Route Selection Process: wiki.mikrotik.com/wiki/Manual:BGP_Best_Path_Selection_Algorithm Route Filters MikroTik: help.mikrotik.com/docs/display/ROS/BGP Rick Frey ROSv7 Cheat Sheet: rickfreyconsulting.com/wp-content/uploads/2022/04/ROSv7-Filters-Cheat-Sheet-1.pdf

[@40giaz]

i love to see and come back again to watch your videos, very nice and thanks a lot.

[@drumaddict89]

oh and thank you again J. !! now totally into BGP stuff and also peered with 2 ciscos yet convinced my boss even to buy 2 CCR2116 for our internet peering routers :) hope you are going to do mikrotik stuff again soon

[@TheNetworkBerg]

That's awesome, yeah I will still do MikroTik stuff as well, there's definitely a few more things that I can cover when it comes to BGP. Might also need to look at revisiting some topics that have changed in v7 for my MTCNA/MTCRE materials.

[@drumaddict89]

@@TheNetworkBerg stoked about that man! going to get my MT cert. in october. MTCNA and MTCTCE

[@filipknezevic1642]

Your boss will cry one day because you convinced him HA HA HA

[@rodrigosteinhorst624]

Great explanation, and a great didactic, your videos are great, congratulations.

[@TheNetworkBerg]

Thank you very much!

[@fahimanwari8813]

Thank you for your perfect video content.

[@Ton_DayTrader]

how to reject some asn with as path filter (in)

[@AgungPrasetio-yn1lm]

Heleo sir, I Try configuration Routing Filter Out Med but filtering, rejecting all access from Upstrim which I provided a filter, can you help sir?

[@grach_777]

Hello, I put 2116 as a border. I configured filtering, but I am not sure that the bgp bgp communities attribute is not transmitted within my router between my bgp peers. Record a video on bgp communities. For my part, I can draw a network diagram as it is built for me under real conditions

[@nikolashuminosky6987]

is there any way to stop advertising the ibgp to ebgp? like if (protocol ibgp) {set drop}?

[@flambio1]

Could you create an example where the filter prevents route loop?

[@BattousaiHBr]

huh i didn't know i could use multiple rules for the same chain in a top to bottom fashion, i was configuring my filters all in a massive rule using recursive if statements and else statements. i wonder if there is any appreciable difference performance-wise between the two methods.

[@TheNetworkBerg]

Your method sounds really good too, I'm really not sure what the performance differences would be. I'm thinking quite minimal but I am really just guessing. So would need to get some answer directly from MT.

[@jleon27]

How to do bgp summary route with mikrotik? Can You help me please? Do you have any video?

[@alimibrahem8120]

Very very thanksful for your deep explaination man. All love and respect..! Well i have a question for you. So in the ROS router board, if the internet connection came from port 1, and i want the internet in all other port, so what i usually do is building a bridge between Eth1 and all other ports. But some people say that this is not desirable, it is recomended to build a NAT rule between Eth 1 and all other ports so the outside interface became a kind of separate from other one, So is this true..? Or that is doesn't make sence..? Please advise me.

[@Roberthernandez-ll1pk]

Hello help me. I am trying to set up filtering with regex for an edge computer, the rule tries to only accept asn1 that is directly connected and only the asns that are directly connected to asn1. That is, it only accepts two autonomous systems. I had this in rosv6 so when I move it to rosv7 it doesn't work. although it is used as a legacy path.

[@srh_btk]

Hey Berg! I'd like to ask: Do you use Ubuntu as your main system on PC? How a usability is for you as network engineer? What SSH client do you use?

[@TheNetworkBerg]

My actual OS is Win11, although I love working on Ubuntu in a work setting so I have an Ubuntu VM running off of VMWare just for that purpose. The default terminal client on Ubuntu works just fine for management :D!

[@nikolaydachev9691]

Overall Mikrotik router filters == Cisco Route-Map ;)

[@snafu7777]

I have been experiencing weird issues with CCR2216 running V7.13. That when I open ip routes to see all the bgp routes, my winbox just freezes and when I try to filter out blackhole routes that i created, it doesnt show. Does this happen to you?

[@nikolashuminosky6987]

why i can't do ibgp peer between loop ip-add on v7? on v6 that is so easy

[@nikolashuminosky6987]

upgraded to the last v7 , fixed