Detecting BGP Misconfiguration for BGP/MPLS VPNs

Author

Liang, Haiying ; Teng, Guowen ; Wang, Hongjun ; Gao, Yuan

Author_Institution

Jilin Normal University, China

fYear

2005

fDate

05-08 Dec. 2005

Firstpage

168

Lastpage

170

Abstract

In BGP/MPLS VPNs, Border Gateway Protocol (BGP) is used to exchange Virtual Private Network (VPN) routing information throughout the provider network consisting of Autonomous Systems (ASes). Configuration errors in BGP/MPLS VPNs can increase Autonomous Systems Border Routers (ASBRs) or Provider Edge (PE) routers overhead on memory and CPU, and even lead to the failure of VPN services. This paper presents an approach that can detect BGP configuration errors based on prefixes sets of neighboring ASes and the AS relationships. This approach requires that every ASBR or PE router respectively remains a prefixes set of each trusted AS and an AS relationships set constructed according bilateral economical agreements. Simulation shows that our solution can effectively detect original misconfigurations and export misconfigurations.

Keywords

Computer errors; Computer networks; Information science; Information security; Multiprotocol label switching; Routing protocols; Space technology; Spine; Telecommunication traffic; Virtual private networks;

fLanguage

English

Publisher

ieee

Conference_Titel

Parallel and Distributed Computing, Applications and Technologies, 2005. PDCAT 2005. Sixth International Conference on

Print_ISBN

0-7695-2405-2

Type

conf

DOI

10.1109/PDCAT.2005.122

Filename

1578889