PCNE Implementing hybrid interconnectivity — All Questions With Answers

Refer to the exhibit.

```
$ gcloud compute routers get-status router-1 --region=us-central1
kind: compute#routerStatus
result:
  bgpPeerStatus:
  - name: peer-1
    ipAddress: 169.254.1.1
    peerIpAddress: 169.254.1.2
    status: ESTABLISHED
    routesLearned: 120
  - name: peer-2
    ipAddress: 169.254.2.1
    peerIpAddress: 169.254.2.2
    status: IDLE
    routesLearned: 0
  bestRoutesForRouter:
  - dest: 10.0.0.0/8
    nextHop: 169.254.1.2
    priority: 100
  - dest: 10.0.0.0/8
    nextHop: 169.254.2.2
    priority: 200
```

Refer to the exhibit.

```
$ gcloud compute routers get-status my-router --region=us-central1
kind: compute#routerStatusResponse
result:
  router: my-router
  bgpPeerStatus:
  - name: peer-a
    ipAddress: 169.254.1.1
    peerIpAddress: 169.254.1.2
    status: UP
    numUp: 1
    numLearned: 0
    advertisedRoutes:
    - 10.0.0.0/8
    learnedRoutes: []
  - name: peer-b
    ipAddress: 169.254.2.1
    peerIpAddress: 169.254.2.2
    status: DOWN
    numUp: 0
    numLearned: 0
    advertisedRoutes: []
    learnedRoutes: []
```

Refer to the exhibit.

```
$ gcloud compute interconnects attachments describe my-attachment --region=us-central1
binding: 0
cloudRouterIpAddress: 169.254.1.1/29
customerRouterIpAddress: 169.254.1.2/29
dataplaneVersion: 2
encryption: IPSEC
interconnect: my-interconnect
privateInterconnectInfo:
  tag8021q: 100
state: ACTIVE
type: DEDICATED
vlanTag8021q: 100
```

Refer to the exhibit.

```
# Cloud Router BGP configuration
router bgp 65001
 neighbor 169.254.0.1 remote-as 64512
 neighbor 169.254.0.1 ebgp-multihop 2
 neighbor 169.254.0.1 update-source loopback0
 address-family ipv4 unicast
  neighbor 169.254.0.1 route-map SET-MED in
  neighbor 169.254.0.1 route-map SET-LOCAL-PREF out
!
route-map SET-MED permit 10
 set metric 100
!
route-map SET-LOCAL-PREF permit 10
 set local-preference 200
```

gcloud compute routers describe my-router --region=us-central1
---
bgp:
  advertiseMode: CUSTOM
  advertisedGroups:
  - ALL_SUBNETS
  advertisedIpRanges:
  - range: 10.0.0.0/8
  asn: 65001
bgpPeers:
- interfaceName: if-bgp-1
  ipAddress: 169.254.0.2
  peerIpAddress: 169.254.0.1
  peerAsn: 65002
  advertisedRoutePriority: 100
  customLearnedRoutePriority: 200
- interfaceName: if-bgp-2
  ipAddress: 169.254.1.2
  peerIpAddress: 169.254.1.1
  peerAsn: 65002
  advertisedRoutePriority: 100
  customLearnedRoutePriority: 100

{
  "bgp": {
    "asn": "64512",
    "advertiseMode": "CUSTOM",
    "advertisedGroups": [],
    "advertisedIpRanges": [
      {"range": "10.0.0.0/8", "description": "on-premises subnet"}
    ],
    "bgpPeers": [
      {
        "name": "peer-1",
        "peerAsn": "64513",
        "peerIpAddress": "169.254.0.1",
        "advertisedRoutePriority": 100
      }
    ]
  }
}

Refer to the exhibit.

Output from an on-premises router:
```
show bgp vpnv4 unicast neighbors 169.254.1.1
BGP neighbor is 169.254.1.1, vrf default
 BGP version 4, remote router ID 10.0.0.1
 BGP state = Connect
 Last read never, last write never
 Hold time is 90, keepalive interval is 30 seconds
 No using MD5 authentication
 Error: Connection refused
```

Refer to the exhibit.

Cloud Router configuration snippet:
```
resource "google_compute_router" "router" {
  name    = "cloud-router"
  network = "default"
  bgp {
    asn = 64512
  }
}

resource "google_compute_router_interface" "interface1" {
  name       = "if-1"
  router     = google_compute_router.router.name
  region     = "us-central1"
  ip_range   = "169.254.0.1/30"
  vpn_tunnel = google_compute_vpn_tunnel.tunnel1.self_link
}

resource "google_compute_router_peer" "peer1" {
  name                      = "peer1"
  router                    = google_compute_router.router.name
  region                    = "us-central1"
  peer_ip_address           = "169.254.0.2"
  peer_asn                  = 65001
  interface                 = "if-1"
  advertise_mode            = "CUSTOM"
  advertised_route_priority = 100
  advertised_ip_ranges {
    range = "10.0.0.0/8"
  }
}
```

Refer to the exhibit.

Log entry from Cloud Router:
```
{
  "jsonPayload": {
    "routerName": "cloud-router-us-1",
    "status": {
      "code": "BGP_OPEN_MSG_ERROR",
      "details": {
        "error": "BGP OPEN message error: unsupported capability"
      }
    }
  }
}
```

Refer to the exhibit.

Output from a Cloud Router BGP session:
```
show ip bgp summary
BGP router identifier 10.0.0.1, local AS number 64512
Neighbor        V          AS MsgRcvd MsgSent   TblVer  InQ OutQ Up/Down  State/PfxRcd
169.254.1.1     4       65001      10      12        0    0    0 00:01:23      1
169.254.1.1     4       65001       0       0        0    0    0 00:00:34  Active
```

Refer to the exhibit.

```
$ gcloud compute interconnects attachments describe my-attachment-1 --region us-central1
...
name: my-attachment-1
interconnect: my-interconnect
...
state: DEFECTIVE
...
```

Refer to the exhibit.

```
$ gcloud compute routers get-status my-router --region us-central1
...
result:
  bgpStatus:
    - peer: 10.0.0.1
      status: established
      learnedRoutes:
        - prefix: 10.1.0.0/16
          nextHop: 10.0.0.1
      advertisedRoutes:
        - prefix: 10.2.0.0/16
    - peer: 10.0.0.2
      status: established
      learnedRoutes:
        - prefix: 10.1.0.0/16
          nextHop: 10.0.0.2
      advertisedRoutes:
        - prefix: 10.2.0.0/16
```

Refer to the exhibit.

```json
{
  "routingMode": "DYNAMIC_ROUTING_MODE",
  "bgpRoutingMode": "GLOBAL",
  "advertiseMode": "CUSTOM",
  "advertisedGroups": [],
  "advertisedIpRanges": [
    {
      "range": "10.1.0.0/16",
      "description": "prod-subnet"
    },
    {
      "range": "10.2.0.0/16"
    }
  ]
}
```