eBGP vs iBGP: Mastering BGP for CompTIA Network+

eBGP (External BGP) connects different Autonomous Systems, utilizing an Administrative Distance of 20. iBGP (Internal BGP) distributes routing information within a single AS, using an AD of 200. While eBGP manages inter-domain traffic, iBGP ensures internal consistency, often requiring route reflectors to bypass the split-horizon loop prevention rule.

What is the fundamental difference between eBGP and iBGP?

To understand BGP, you first have to understand the Autonomous System (AS). Think of an AS as a single administrative domain—like an ISP or a large corporation—that has a unique ID number. eBGP, or External BGP, is the protocol that allows these separate ASes to talk to one another. It is essentially the glue that holds the global internet together, exchanging routing information between different organizations.

iBGP, or Internal BGP, operates within the boundaries of a single AS. While eBGP is about finding the path to another network, iBGP is about ensuring that every router inside your own network knows how to get to the exit point. For your Network+ exam, remember that eBGP connects different AS numbers, while iBGP connects routers sharing the same AS number. If you see a scenario involving two different companies connecting, you're looking at eBGP.

How does Administrative Distance differ between the two?

In the world of routing, not all paths are created equal. Your router uses Administrative Distance (AD) to determine which routing protocol to trust more when multiple paths to the same destination exist. This is a high-yield topic for the N10-009 exam, so commit these numbers to memory: eBGP has an AD of 20, while iBGP has an AD of 200.

Why the massive gap? We trust eBGP more because it represents a direct path to an external destination. iBGP, on the other hand, has a very high AD because it is often used to carry external routes across an internal network. If a router has a path learned via OSPF (AD 110) and a path learned via iBGP (AD 200), it will always choose the OSPF path. Understanding this hierarchy prevents you from getting tripped up by 'best path' questions on the exam.

Why is the iBGP split-horizon rule so critical?

BGP is designed to prevent routing loops at all costs. In eBGP, this is easy: if a router sees its own AS number in the path list, it rejects the update. However, since iBGP routers all share the same AS number, that mechanism doesn't work. To solve this, BGP implements the 'split-horizon' rule: a router will not advertise a route learned via iBGP to another iBGP peer.

This creates a significant challenge. If Router A tells Router B about a route, Router B cannot tell Router C. To ensure every router in the AS knows the path, you would traditionally need a 'full mesh' topology, where every single iBGP router is peered with every other router. In a network of 10 routers, that's 45 separate sessions. As you can imagine, this doesn't scale well in real-world enterprise environments.

How do Route Reflectors solve iBGP scalability issues?

Since maintaining a full mesh is a nightmare for network admins, we use Route Reflectors (RRs). A Route Reflector is a designated router that is allowed to break the split-horizon rule. Instead of blocking the update, the RR 'reflects' the routing information to other iBGP peers. This transforms your complex web of connections into a more manageable hub-and-spoke architecture.

When you're studying for the Network+, think of the Route Reflector as the 'manager' of the AS. It receives the route from one peer and says, 'Hey everyone else, here is the path to the external network.' This drastically reduces the number of BGP sessions required and prevents the CPU overhead that would otherwise crash a lower-end router. It's a practical solution to a theoretical limitation of the protocol.

When should you use eBGP versus iBGP in a real-world scenario?

Imagine you are the lead engineer for a mid-sized company. You have two different ISP connections for redundancy. You would use eBGP to peer with those ISPs, allowing your edge routers to learn which paths are available to the rest of the internet. This is the 'External' part of the equation—managing the boundary of your network.

Once those external routes enter your network, you need your internal core routers to know how to reach those edge routers. This is where iBGP comes in. You use iBGP to propagate those external prefixes across your internal infrastructure without having to run a massive, complex Interior Gateway Protocol (IGP) like OSPF for every single external route. Mastering this distinction is key to passing the routing domain of the N10-009.

How can you effectively practice BGP concepts for the N10-009?

BGP can feel abstract until you see it in the context of exam questions. The secret to mastering it isn't just reading a textbook; it's applying the logic to simulated scenarios. You need to be able to look at a network diagram and instantly identify whether a peering session is iBGP or eBGP based on the AS numbers provided.

That's exactly why we built Cert Sensei. We offer 1,000 expert-curated CompTIA Network+ (N10-009) practice questions that mirror the actual exam experience. Instead of just giving you a 'correct' answer, we provide detailed expert reasoning for every single question. With our domain-level analytics, you can see exactly where you're struggling—whether it's BGP administrative distances or route reflectors—so you can stop wasting time on what you already know and focus on your weak points.

❓ Frequently Asked Questions