What Is Autonomous System in Networking?
On This Page
Quick Definition
An Autonomous System, or AS, is a collection of networks managed by one organization, such as an internet service provider or a large company. Each AS has a unique number called an ASN that identifies it on the internet. Routers inside an AS use protocols like EIGRP or OSPF, while between ASes, they use BGP to exchange routing information.
Common Commands & Configuration
router eigrp 100router bgp 65001neighbor 10.0.0.2 remote-as 65002show ip bgp summaryshow ip eigrp neighborsMust Know for Exams
The CCNA exam covers Autonomous Systems in several key areas, particularly in the context of routing protocols. The exam objectives for CCNA (200-301) include configuring and verifying EIGRP and BGP operations. EIGRP requires an AS number to be configured on all routers in the domain, and learners must understand that mismatched AS numbers prevent neighbor adjacency. Similarly, BGP configuration requires specifying the local AS number, and the exam tests whether you can identify the correct ASN from a scenario.
In the exam, you will encounter questions where you must interpret a routing table or a show command output to determine the AS path. For example, a question might show a 'show ip bgp' output and ask which AS a particular route originated from. You must understand that the last AS number in the AS path list is the originating AS. Another common question type is troubleshooting BGP neighbor states — if the AS number is misconfigured, the neighbor state will remain in 'Active' or 'Idle'.
For EIGRP, the exam may present a scenario where two routers are not forming a neighbor relationship. The correct answer will likely point to the AS number mismatch. You might also see questions about the difference between iBGP (same AS) and eBGP (different AS) and how they handle metrics and loop prevention. iBGP requires full mesh or route reflectors, while eBGP by default uses the AS path for loop detection.
The exam also tests your understanding of private AS numbers. You might be asked whether a specific ASN is public or private. For example, AS 65000 is private and can be used internally, but must be stripped before advertising to the internet. This is important for enterprises that use private ASNs and then connect to an ISP.
Overall, AS-related questions on the CCNA are not the most numerous, but they appear consistently. They are often mixed with questions on routing protocol configuration and verification. Learners who solidly understand AS numbers, their purpose, and their role in EIGRP and BGP will find these questions straightforward and avoid common pitfalls.
Simple Meaning
Think of the internet as a giant network of neighborhoods. Each neighborhood is an Autonomous System (AS). One neighborhood might be run by Comcast, another by AT&T, and another by a large university. Inside each neighborhood, the streets and houses are managed by a single homeowners' association — that's the single administrative control. The homeowners' association decides how streets are named, how traffic flows within the neighborhood, and what the rules are. That internal system is like the routing protocols (EIGRP, OSPF) used inside an AS.
Now, these neighborhoods need to connect to each other. The post office (the internet) needs to know how to deliver a letter from a house in the Comcast neighborhood to a house in the AT&T neighborhood. That's where BGP comes in. BGP is like a set of agreements between neighborhoods about which roads to use for mail delivery. Each neighborhood has a unique ID number — the Autonomous System Number (ASN) — so the post office knows exactly which neighborhood to send the mail to.
The key idea is that inside an AS, you trust all the routers and use fast, efficient protocols. Between ASes, you don't fully trust the other side, so you use a robust, policy-based protocol like BGP. This separation makes the internet scalable. Without Autonomous Systems, every router on the internet would need to know about every other network, which would be impossible. By grouping networks into ASes, we make the internet manageable. When you configure a router in the CCNA exam, you assign an AS number to tell the router which neighborhood it belongs to, and that determines how it talks to other routers.
Full Technical Definition
An Autonomous System (AS) is a fundamental concept in internet routing. It is defined by the Internet Engineering Task Force (IETF) in RFC 1930 as a connected group of one or more IP prefixes run by one or more network operators which has a single and clearly defined routing policy. In practice, an AS is a collection of routers and networks under a single administrative domain, typically owned by an Internet Service Provider (ISP), a large enterprise, a university, or a cloud provider.
Each AS is identified by a unique Autonomous System Number (ASN). ASNs are 16-bit or 32-bit numbers assigned by the Internet Assigned Numbers Authority (IANA) through regional internet registries (RIRs) like ARIN, RIPE NCC, and APNIC. Public ASNs range from 1 to 64511 for 16-bit and 1 to 4,294,967,295 for 32-bit. Private ASNs (64512 to 65535 for 16-bit, and 4200000000 to 4294967294 for 32-bit) are used for internal networks, similar to private IP addresses.
Inside an AS, routers run Interior Gateway Protocols (IGPs) such as OSPF, EIGRP, or IS-IS. These protocols are designed for fast convergence and high efficiency within a trusted network. The routers within an AS have full trust and exchange detailed routing information. The goal is to find the best path to any destination within the AS as quickly as possible.
Between different ASes, routers use the Exterior Gateway Protocol (EGP), specifically the Border Gateway Protocol (BGP). BGP is a path-vector protocol that carries AS path information to prevent routing loops. When a BGP router receives a routing update, it examines the AS path attribute. If its own AS number appears in the path, the update is discarded to prevent loops. BGP is policy-based, meaning administrators can set rules for which routes to accept, prefer, or advertise based on business relationships (transit, peering, customer).
In the context of the Cisco CCNA exam, you will configure EIGRP and BGP. EIGRP requires a router to be in an AS, and all routers in that EIGRP domain must share the same AS number. For BGP, you configure the local AS number on each router. The CCNA exam expects you to understand the difference between internal BGP (iBGP) and external BGP (eBGP), the purpose of the ASN, and how AS path is used for loop prevention.
The practical implementation involves assigning ASNs to routers, establishing neighbor relationships, and verifying routing tables. Real IT professionals manage AS migration when a company is acquired, troubleshoot BGP route flapping, and set up multihoming with multiple ISPs. Understanding AS concepts is critical for network engineers who design scalable, resilient internet-connected networks.
Real-Life Example
Imagine a large international postal system. The world is divided into countries. Each country has its own postal service — the United States has USPS, Germany has Deutsche Post, Japan has Japan Post. Each country is like an Autonomous System. Inside the United States, USPS manages all mail delivery within the country. They decide which trucks go to which states, how to sort mail, and the fastest routes between cities. That internal operation is like the interior routing protocols (EIGRP, OSPF) used inside an AS.
Now, if someone in the US wants to send a letter to someone in Germany, the USPS doesn't drive a truck across the ocean. Instead, it hands the letter to Deutsche Post at the border. The letter has a destination address, and the two postal services have an agreement to exchange mail. That handoff is like BGP peering between two ASes. The USPS is AS 1, and Deutsche Post is AS 2. They each have unique IDs (the AS numbers), and they have a policy for how to exchange mail.
The USPS also knows that if a letter is addressed to a country it doesn't directly serve, it should send it to a neighboring country's postal service that has an agreement. This is like BGP route advertisement. The USPS might have a list of 'routes' — for example, 'For mail to Japan, send it to Deutsche Post, who then sends it to Japan Post.' That list is the BGP routing table.
Now, if someone puts a letter in the USPS system that is already stamped from another country, the USPS will see that the letter's 'AS path' includes USPS itself, and it will reject it to prevent a loop. This is exactly how BGP uses AS path to prevent routing loops. The postal analogy helps you remember that the internet is built on trust and policy between independent administrative domains, and that each domain manages its internal traffic independently.
Why This Term Matters
The concept of an Autonomous System is foundational to how the internet works. Without ASes, every router on the internet would need to know the path to every single network, which would be impossible given the millions of routes. By grouping networks into ASes, the internet becomes scalable and manageable. Network engineers design their networks as ASes to control routing policies, ensure redundancy, and manage traffic. For example, a company with two internet connections (multihoming) can use BGP to advertise its IP prefixes through both links, providing failover and load balancing.
In the real world, AS management is a critical job for network administrators at ISPs and large enterprises. When a company is acquired and its network must merge with another, the AS numbers must be coordinated to avoid routing issues. Misconfiguration of AS numbers can cause traffic blackholes or loops, leading to outages. For instance, if two routers in the same EIGRP domain are configured with different AS numbers, they will not form a neighbor relationship, and the network will be partitioned.
Another practical concern is BGP hijacking, where a malicious AS advertises IP prefixes that belong to another AS, stealing traffic. Understanding AS ownership and using mechanisms like RPKI (Resource Public Key Infrastructure) helps prevent this. For IT professionals, knowing how to verify AS paths, configure BGP filters, and troubleshoot route flaps is essential for maintaining a stable and secure network.
On the CCNA exam, AS concepts appear in questions about EIGRP configuration, BGP neighbor establishment, and routing loop prevention. You might be asked to identify the AS number from a configuration, determine why a BGP session is not coming up, or explain the difference between internal and external routing protocols. Mastering AS concepts is not just about passing the exam — it is about understanding the reality of internet-scale networking.
How It Appears in Exam Questions
In the CCNA exam, questions about Autonomous Systems appear in multiple formats: multiple-choice, scenario-based, and simulation-based. One common pattern is a scenario where a network engineer is configuring two routers to run EIGRP. The configuration shows 'network 10.0.0.0' but the AS number on one router is 100 and on the other is 200. The question asks why the routers are not forming a neighbor relationship. The correct answer is that the AS numbers must match for EIGRP to form an adjacency.
Another pattern involves BGP configuration. You might see a partial configuration like 'router bgp 65001' on one router and 'router bgp 65002' on another. The question asks what additional command is needed to establish a BGP session. The answer would be the 'neighbor x.x.x.x remote-as' command with the appropriate AS number. Often, the trap is that the learner forgets to specify the remote-as or uses the wrong number.
Troubleshooting questions are also common. A 'show ip bgp summary' output might show that a neighbor is in the 'Idle' state. The question asks what could cause this. Possible answers include: incorrect AS number, access list blocking TCP port 179, or no route to the neighbor's IP. The learner must identify that an AS number mismatch is a primary cause.
There are also conceptual questions. For example, 'Which of the following best describes the purpose of an Autonomous System?' Options might include: 'To group networks under a single administrative domain', 'To provide redundancy for internet connections', or 'To run routing protocols like OSPF'. The correct answer is the first one. Another question might ask: 'What is the range of private AS numbers?' The correct range is 64512 to 65535 for 16-bit ASNs.
Simulation questions may require you to configure EIGRP with the correct AS number on multiple routers. You might be given a topology where AS 100 is the EIGRP domain, and you need to enable EIGRP on the interfaces. Failure to use the same AS number on all routers will result in incomplete connectivity, and the simulation grader will mark it wrong.
Finally, you may see drag-and-drop questions where you must match AS numbers to their descriptions, or order the steps of BGP path selection. Understanding that AS numbers are used to prevent loops is a key concept that appears frequently.
Practise Autonomous System Questions
Test your understanding with exam-style practice questions.
Example Scenario
You are a network administrator for a medium-sized company called TechCorp. TechCorp has two office locations: one in New York and one in Los Angeles. You need to connect these offices using EIGRP. Each location has a router. You decide to use AS 100 for the EIGRP domain. On the New York router, you configure 'router eigrp 100' and then 'network 192.168.1.0 0.0.0.255'. On the Los Angeles router, you configure 'router eigrp 200' by mistake. The two routers are connected via a WAN link with IP addresses 10.0.0.1 and 10.0.0.2.
When you check the neighbor relationship using 'show ip eigrp neighbors', you see no neighbors. Puzzled, you check the logs and see an error message that says 'Mismatched AS numbers'. You realize the mistake and change the Los Angeles router to 'router eigrp 100'. After a few seconds, the neighbors come up, and routes are exchanged. Now both offices can communicate.
A month later, TechCorp decides to implement BGP because they are getting a second internet connection for redundancy. Your ISP gives you a public AS number of 65001. You configure BGP on your border router with 'router bgp 65001' and add the neighbor's IP with the remote-as of your ISP (say, AS 12345). You also need to advertise your public IP block to the ISP. You use the 'network' command under BGP to advertise 203.0.113.0/24. The BGP session comes up successfully, and you now have a backup path.
One day, the ISP experiences a routing issue, and they start sending traffic that is not destined for your network. You check the BGP table and see strange routes. You realize that another AS is advertising your IP block. You contact the ISP and set up RPKI validation to prevent hijacking. This scenario shows how AS numbers are used in both interior and exterior routing, and how misconfigurations can cause immediate problems.
Common Mistakes
Thinking that all routers in an EIGRP network need different AS numbers.
EIGRP requires all routers in the same routing domain to use the same AS number. Different AS numbers prevent neighbor formation.
Always configure the same AS number on every router that should share EIGRP routes.
Confusing the AS number used in EIGRP with the BGP AS number.
EIGRP uses a 16-bit AS number that is locally significant and does not need to match the public ASN. BGP uses an ASN that must be globally unique if public.
Treat the EIGRP AS number as a local process ID and the BGP AS number as a globally significant identifier.
Assuming that all routers in the same AS must be directly connected.
Routers in the same AS can be separated by other networks. For example, iBGP sessions can run across multiple hops as long as there is IP reachability.
Understand that AS membership is about administrative control, not physical topology.
Believing that BGP only works between different ASes.
BGP can also operate within the same AS, called iBGP. iBGP is used to carry external routes inside the AS without redistributing into an IGP.
Remember that BGP can be iBGP (same AS) or eBGP (different AS), each with different rules for next-hop and loop prevention.
Forgetting to include the private AS range in BGP configuration when using a private ASN.
Private ASNs (64512-65535) are not globally routable and must be stripped when advertising to the internet. If you use a private ASN in BGP to an ISP, the ISP will reject the session unless you have a special agreement.
Use a public ASN from your RIR for BGP sessions with ISPs. Use private ASNs only for internal BGP or when the ISP allows.
Exam Trap — Don't Get Fooled
{"trap":"A question shows a BGP configuration with 'router bgp 100' and a neighbor statement with 'remote-as 100'. It asks whether this is iBGP or eBGP. Many learners assume that because the AS numbers are the same, it must be iBGP — but that is correct.
The trap is when the numbers are different, and learners incorrectly think iBGP is used between different ASes.","why_learners_choose_it":"Learners often think that BGP is only 'external' so they assume all BGP is eBGP. They also confuse the term 'autonomous system' and think that different numbers always mean a different organization, but iBGP exists within one AS."
,"how_to_avoid_it":"Memorize the rule: if the local AS and the remote AS are the same, it is iBGP. If they are different, it is eBGP. Practice with show commands like 'show ip bgp summary' to identify the neighbor AS."
Commonly Confused With
A routing domain is a collection of networks that run the same routing protocol and share routing information. An AS is a broader concept that includes administrative control and policy. Every AS can have multiple routing domains inside it.
A company running OSPF in one part and EIGRP in another has two routing domains within the same AS.
An ASN is just the numerical identifier for an AS. The AS is the actual network organization. People often use 'AS' and 'ASN' interchangeably, but the ASN is the number, and the AS is the administrative domain.
AS 64500 is an AS number; the networks managed by Google under AS 15169 form the AS itself.
An OUI is a 24-bit number assigned to hardware manufacturers for MAC addresses, not for routing. It has nothing to do with network layer routing or policy.
Cisco's OUI is 00-1A-2B; it identifies the vendor of a network card, not a routing domain.
A peer AS is simply another AS that you have a BGP peering relationship with. Confusingly, your AS and the peer AS are both autonomous systems, but the term 'peer' describes the relationship.
If your AS is 100 and you connect to AS 200, AS 200 is your peer AS.
A region is a geographical or logical grouping often used in OSPF or EIGRP, but it is not standardized like an AS. Regions are local to the protocol and do not involve global numbering.
You might have an OSPF backbone area 0 and a region for the sales department, but that is not an AS.
Step-by-Step Breakdown
Obtain an AS Number
If your network needs to connect to the internet using BGP, you must obtain a public ASN from a Regional Internet Registry (RIR). For private networks, you can use a private ASN from the reserved range.
Assign the AS Number to Routers
On each router that will participate in the AS, you configure the AS number in the routing protocol (EIGRP or BGP). For EIGRP, you use `router eigrp ASN`. For BGP, you use `router bgp ASN`.
Define the Routing Policy
Inside the AS, you choose an IGP (like OSPF or EIGRP) to exchange routes. Between ASes, you define BGP policies that control which routes to accept, prefer, or advertise based on business agreements.
Establish Neighbor Relationships
Routers in the same EIGRP AS automatically discover neighbors using hello packets. For BGP, you manually configure neighbor IPs and remote AS numbers. The routers then exchange routing information.
Prevent Routing Loops
BGP uses the AS Path attribute to detect loops. When a router receives a route with its own AS already in the path, it discards that route. This ensures that traffic never loops between ASes.
Advertise Routes to Other ASes
The AS advertises its IP prefixes to neighboring ASes via BGP. These advertisements include the AS path, which grows as the route passes through multiple ASes, creating a record of the route's path.
Verify and Troubleshoot
Network engineers use commands like `show ip bgp summary`, `show ip eigrp neighbors`, and `show ip route` to verify that the AS is functioning correctly. They check for neighbor states, AS path length, and route propagation.
Practical Mini-Lesson
When you work as a network engineer, understanding Autonomous Systems is crucial for designing and troubleshooting enterprise networks. Let's walk through a real-world scenario. You are responsible for a company that has two internet connections from different ISPs to ensure redundancy. Your company owns the public IP block 203.0.113.0/24. You have been assigned AS 65050 by your RIR.
You configure your border router with `router bgp 65050`. You then add two neighbor statements: one for the first ISP with AS 100, and one for the second ISP with AS 200. You also configure `network 203.0.113.0 mask 255.255.255.0` to advertise your block. Now, both ISPs know that your IP block is reachable through you. If one ISP goes down, BGP will automatically withdraw the route from that path, and traffic will flow through the other ISP.
But problems can happen. For example, if your router mistakenly advertises a larger prefix (like 203.0.113.0/23), your ISPs might drop the route because it overlaps with other allocations. Or, if you forget to include the `network` command, your block won't be advertised at all. Another common issue is that your router might receive a route from an ISP that includes your own AS in the path, which you should discard. But if you have a bug or misconfiguration, you could create a routing loop.
In the CCNA lab, you will practice configuring EIGRP with AS numbers. You will learn that all routers in the same EIGRP domain must use the same AS number. If you change it on one router, the neighbor relationship breaks. You will also configure BGP and see how the 'show ip bgp' command displays the AS path. For example, an AS path of '100 200 300' means the route passed through AS 100, then AS 200, and originated in AS 300.
Professionals also use AS numbers for policy routing. For instance, you might prefer routes from one ISP over another by setting local preference. Or you might prepend your AS number multiple times to make your path less attractive to inbound traffic. This is common in multihomed networks. Understanding these advanced concepts starts with a solid grasp of what an AS is and how it works in both theory and practice.
Troubleshooting Clues
Symptom:
Check if all routers use the same AS number under 'router eigrp'. Also verify IP connectivity and interface delays.
Symptom:
Common cause is an AS number mismatch in the 'neighbor remote-as' statement. Also check if the neighbor IP is reachable and TCP port 179 is not blocked.
Symptom:
Ensure the 'network' command under BGP matches a route in the routing table. Also verify that the route is not being filtered by outbound policy.
Symptom:
Your router is receiving a route that contains its own AS. This could indicate a misconfiguration or a BGP hijack. Check the neighbor's AS and update filters.
Memory Tip
Think of an AS as a country with its own postal service. The AS number is the country code. Internal routing is like domestic mail, BGP is like international mail. Remember: same country = same AS number for internal protocols.
Covered in These Exams
Current Exam Context
Current exam versions that test this topic — use these objectives when studying.
200-301Cisco CCNA →N10-009CompTIA Network+ →Related Glossary Terms
A 2-in-1 laptop is a portable computer that can switch between a traditional laptop form and a tablet form, usually by detaching or rotating the keyboard.
The 24-pin motherboard connector is the main power cable that connects the computer's power supply unit (PSU) to the motherboard, supplying electricity to the motherboard and its components.
Two-factor authentication (2FA) is a security method that requires two different types of proof before granting access to an account or system.
32-bit File Allocation Table (FAT32) is a file system that organizes data on storage devices like hard drives and USB flash drives using a 32-bit addressing scheme to track where files are stored.
A 3D printer is a device that creates physical objects by depositing layers of material based on a digital model.
5G is the fifth generation of cellular network technology, designed to deliver faster speeds, lower latency, and support for many more connected devices than previous generations.
The 8-pin CPU connector is a power cable from the power supply that delivers dedicated electricity to the processor on a computer's motherboard.
802.1Q is the networking standard that allows multiple virtual LANs (VLANs) to share a single physical network link by tagging Ethernet frames with VLAN identification information.
Quick Knowledge Check
1.What is the primary purpose of an Autonomous System?
2.Which protocol is used between different Autonomous Systems?
3.What is the private ASN range?
4.What happens if two routers in the same EIGRP domain have different AS numbers?
Frequently Asked Questions
Do I need a public AS number for my home network?
No. Home networks use a single internet connection from an ISP and do not run BGP. Public AS numbers are for large organizations that need to advertise their own IP blocks to the internet.
Can one organization have multiple AS numbers?
Yes. Some large organizations have multiple AS numbers for different parts of their network. For example, Google has many AS numbers for different services and regions.
What is the difference between an AS and a routing domain?
An AS is defined by administrative control and policy, while a routing domain is defined by a single routing protocol. A single AS can contain multiple routing domains (e.g., OSPF and BGP).
How do I find the AS number of a website?
You can use tools like 'whois' or online BGP lookup tools. For example, 'whois 8.8.8.8' will show that Google's public DNS is in AS 15169.
Is it possible to change an AS number after it has been configured?
Yes, but it requires careful planning. You must update the configuration on all routers in the AS, re-establish BGP sessions, and potentially coordinate with ISPs. A migration plan is essential.
What happens if I use a private AS number in a public BGP session?
Most ISPs will reject your BGP session because private AS numbers are not globally unique. You must use a public ASN obtained from a RIR for public BGP peering.
Summary
An Autonomous System (AS) is a fundamental building block of the internet, representing a collection of networks under a single administrative domain. It is identified by a unique AS number, which is used by routing protocols like EIGRP and BGP to manage traffic inside and between organizations. Understanding AS concepts is essential for IT professionals, especially those pursuing the CCNA certification, because it directly relates to routing protocol configuration and troubleshooting.
In the CCNA exam, you will encounter AS numbers in the context of EIGRP and BGP. You must know that EIGRP requires the same AS number on all routers in the domain for neighbor formation. For BGP, you must understand how AS numbers identify different administrative domains and how the AS Path attribute prevents routing loops. Common mistakes include mismatching AS numbers in EIGRP, confusing public and private AS ranges, and misunderstanding the difference between iBGP and eBGP.
The real-world importance of AS numbers cannot be overstated. They enable the internet to scale, allow organizations to implement routing policies, and facilitate redundancy. By mastering the concept of Autonomous Systems, you will gain a deeper understanding of how the internet works and be better prepared for both the exam and your career in networking.