Designing Enterprise WAN Architectures with BGP and Path Control

March 2013 | Reading time: 8 minutes

Understanding the Role of BGP in Enterprise WANs

Border Gateway Protocol (BGP) has long been the cornerstone of internet routing, but in recent years it has gained popularity within enterprise WAN environments as organizations aim to enhance resilience, control, and performance. For large enterprises with multiple sites, leveraging BGP allows granular control of traffic paths, prioritization policies, and redundancy models that exceed the capabilities of simpler protocols like OSPF or static routing.

In a traditional enterprise, multiple MPLS circuits or hybrid MPLS-Internet designs require precise outbound and inbound route engineering. BGP's policy-based model is uniquely suited for this, enabling enterprises to influence route selection through attributes such as Local Preference, MED, and AS Path prepending.

Route Maps and Policy-Based Routing

When designing a WAN using BGP, control is paramount. Route maps become one of the most powerful tools available for matching prefixes, applying actions, and filtering routes based on custom logic. For example, an enterprise might define a route map that sets a higher Local Preference for traffic destined to critical SaaS providers, ensuring those flows prefer the MPLS path while general internet access uses broadband backup links.

Policy-Based Routing (PBR) adds another layer of decision-making by enabling forwarding decisions based on source/destination, application type, or even time-of-day. While BGP controls path advertisement and selection, PBR defines how specific traffic types are forwarded regardless of the routing table—ideal for exception-based scenarios like VoIP or backup replication traffic.

Key Design Considerations

• Redundancy: Ensure dual-homing to multiple ISPs or MPLS providers, with health-checked failover mechanisms using BFD or IP SLA.
• Prefix Aggregation: Use summarization to reduce the routing table size and improve convergence times.
• Loop Prevention: In iBGP scenarios, implement full mesh or route reflectors to maintain consistency.
• AS Path Manipulation: Use AS Path prepending to influence upstream route preferences during failover.
• Routing Security: Filter inbound routes using prefix-lists and implement MD5 authentication for BGP peers.

Sample BGP Configuration Snippet

router bgp 65000
 bgp log-neighbor-changes
 neighbor 192.0.2.1 remote-as 65010
 neighbor 192.0.2.1 description MPLS-ISP
 neighbor 192.0.2.1 password secureBGP

 address-family ipv4
  network 10.10.0.0 mask 255.255.0.0
  neighbor 192.0.2.1 activate
  neighbor 192.0.2.1 route-map PREFER_MPLS out
 exit-address-family

route-map PREFER_MPLS permit 10
 match ip address prefix-list CRITICAL_ROUTES
 set local-preference 200

Conclusion

Designing enterprise WANs with BGP opens the door to powerful traffic control and failover capabilities. However, success lies in a balanced application of policy, redundancy, and best practices. BGP is not a plug-and-play protocol—without proper route filtering and visibility, route leaks or instability may arise. A carefully structured BGP design that includes route maps, prefix lists, and path manipulation techniques ensures predictable behavior and operational clarity.

Eduardo Wnorowski is a network infrastructure consultant and technologist.
With over 18 years of experience in IT and consulting, he brings deep expertise in networking, security, infrastructure, and transformation.
Connect on Linkedin